@integrity-labs/agt-cli 0.19.11 → 0.19.13

package/dist/bin/agt.js

@@ -50,7 +50,7 @@ import {
   success,
   table,
   warn
-} from "../chunk-HBZL6V36.js";
+} from "../chunk-SUUTWC6M.js";
 
 // src/bin/agt.ts
 import { join as join10 } from "path";
@@ -3734,7 +3734,7 @@ import { execFileSync, execSync } from "child_process";
 import { existsSync as existsSync5, realpathSync } from "fs";
 import chalk17 from "chalk";
 import ora15 from "ora";
-var cliVersion = true ? "0.19.11" : "dev";
+var cliVersion = true ? "0.19.13" : "dev";
 async function fetchLatestVersion() {
   const host2 = getHost();
   if (!host2) return null;
@@ -4192,7 +4192,7 @@ function handleError(err) {
 }
 
 // src/bin/agt.ts
-var cliVersion2 = true ? "0.19.11" : "dev";
+var cliVersion2 = true ? "0.19.13" : "dev";
 var program = new Command();
 program.name("agt").description("Augmented CLI \u2014 agent provisioning and management").version(cliVersion2).option("--json", "Emit machine-readable JSON output (suppress spinners and colors)").option("--skip-update-check", "Skip the automatic update check on startup");
 program.hook("preAction", (thisCommand) => {

package/dist/{chunk-HBZL6V36.js → chunk-SUUTWC6M.js}

@@ -3274,6 +3274,9 @@ function buildRemoteMcpEntry(definitionId) {
 // ../../packages/core/dist/provisioning/frameworks/claudecode/index.js
 var VALID_CODE_NAME = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
 var SECRET_FILE_MODE = 384;
+function shellQuote(value) {
+  return `'${value.replace(/'/g, `'\\''`)}'`;
+}
 function assertValidCodeName(codeName) {
   if (!VALID_CODE_NAME.test(codeName)) {
     throw new Error(`Invalid agent code_name: "${codeName}". Must be kebab-case.`);
@@ -3365,6 +3368,24 @@ function syncMcpToProject(codeName) {
   } catch {
   }
 }
+function readExistingMcpEnvVar(codeName, serverId, envKey) {
+  const mcpJsonPath = join4(getAgentDir(codeName), "provision", ".mcp.json");
+  try {
+    const raw = readFileSync4(mcpJsonPath, "utf-8");
+    const config = JSON.parse(raw);
+    const server = config.mcpServers?.[serverId];
+    if (!server || typeof server !== "object")
+      return void 0;
+    const env2 = server.env;
+    const value = env2?.[envKey];
+    if (typeof value !== "string" || value === "" || value === `\${${envKey}}`) {
+      return void 0;
+    }
+    return value;
+  } catch {
+    return void 0;
+  }
+}
 function deployArtifactsToProject(codeName, provisionDir) {
   const projectDir = getProjectDir(codeName);
   mkdirSync4(projectDir, { recursive: true });
@@ -3988,6 +4009,11 @@ function buildMcpJson(input) {
         // every call; the API derives team server-side. AGT_TEAM_SLUG
         // dropped — single-team-per-host invariant gone.
         AGT_AGENT_ID: input.agent.agent_id,
+        // ENG-4788: cloud-broker@0.6+ exits at startup if AGT_RUN_ID
+        // is missing (packages/cloud-broker/src/index.ts:63). Manager
+        // exports AGT_RUN_ID per Claude spawn; Claude substitutes the
+        // placeholder at MCP-launch time. Same pattern as augmented.
+        AGT_RUN_ID: "${AGT_RUN_ID}",
         AGT_API_KEY: "${AGT_API_KEY}",
         PATH: process.env["PATH"] ?? "",
         HOME: process.env["HOME"] ?? ""
@@ -4189,11 +4215,11 @@ ${sections}`
       if (!p.api_key)
         continue;
       const providerEnvPrefix = p.provider.toUpperCase().replace(/[^A-Z0-9]/g, "_");
-      envLines.push(`${providerEnvPrefix}_API_KEY=${p.api_key}`);
+      envLines.push(`${providerEnvPrefix}_API_KEY=${shellQuote(p.api_key)}`);
       const rawBaseUrl = p.metadata["base_url"];
       const baseUrl = typeof rawBaseUrl === "string" ? rawBaseUrl.trim() : "";
       if (baseUrl.length > 0) {
-        envLines.push(`${providerEnvPrefix}_BASE_URL=${baseUrl}`);
+        envLines.push(`${providerEnvPrefix}_BASE_URL=${shellQuote(baseUrl)}`);
       }
     }
     if (envLines.length > 1) {
@@ -4455,12 +4481,12 @@ ${sections}`
       if (integration.auth_type === "oauth2") {
         const accessToken = creds.access_token;
         if (accessToken) {
-          envLines.push(`${prefix}_ACCESS_TOKEN=${accessToken}`);
+          envLines.push(`${prefix}_ACCESS_TOKEN=${shellQuote(accessToken)}`);
         }
       } else if (integration.auth_type === "api_key") {
         const apiKey = creds.api_key;
         if (apiKey) {
-          envLines.push(`${prefix}_API_KEY=${apiKey}`);
+          envLines.push(`${prefix}_API_KEY=${shellQuote(apiKey)}`);
         }
       }
       if (integration.config) {
@@ -4469,7 +4495,7 @@ ${sections}`
           if (typeof value === "string" && value) {
             const upperKey = key.toUpperCase();
             const envKey = upperKey.startsWith(`${prefix}_`) ? upperKey : `${prefix}_${upperKey}`;
-            envLines.push(`${envKey}=${value}`);
+            envLines.push(`${envKey}=${shellQuote(value)}`);
           }
         }
       }
@@ -4508,12 +4534,18 @@ ${sections}`
     }
     const hasCloudBroker = integrations.some((i) => i.definition_id === "cloud-broker");
     if (hasCloudBroker) {
+      const existingAgentId = readExistingMcpEnvVar(codeName, "cloud-broker", "AGT_AGENT_ID");
       this.writeMcpServer(codeName, "cloud-broker", {
         command: "npx",
         args: ["-y", "@integrity-labs/cloud-broker@latest"],
         env: {
           AGT_HOST: "${AGT_HOST}",
           AGT_API_KEY: "${AGT_API_KEY}",
+          AGT_AGENT_ID: existingAgentId ?? "${AGT_AGENT_ID}",
+          // ENG-4788: cloud-broker@0.6+ exits at startup if AGT_RUN_ID
+          // is missing. Mirror buildMcpJson's entry on incremental sync
+          // so an agent that connects AWS post-provision boots cleanly.
+          AGT_RUN_ID: "${AGT_RUN_ID}",
           PATH: process.env["PATH"] ?? "",
           HOME: process.env["HOME"] ?? ""
         }
@@ -8204,4 +8236,4 @@ export {
   managerInstallSystemUnitCommand,
   managerUninstallSystemUnitCommand
 };
-//# sourceMappingURL=chunk-HBZL6V36.js.map
+//# sourceMappingURL=chunk-SUUTWC6M.js.map