@integrity-labs/agt-cli 0.27.58 → 0.27.59

package/dist/bin/agt.js

@@ -27,7 +27,7 @@ import {
   success,
   table,
   warn
-} from "../chunk-XX2LDA5B.js";
+} from "../chunk-IVV4YCX2.js";
 import {
   CHANNEL_REGISTRY,
   DEPLOYMENT_TEMPLATES,
@@ -551,8 +551,8 @@ async function lintCommand(path) {
       process.exitCode = 1;
       return;
     }
-    const { readdirSync: readdirSync5, statSync: statSync4 } = await import("fs");
-    const entries = readdirSync5(augmentedDir);
+    const { readdirSync: readdirSync6, statSync: statSync4 } = await import("fs");
+    const entries = readdirSync6(augmentedDir);
     for (const entry of entries) {
       const entryPath = join2(augmentedDir, entry);
       if (statSync4(entryPath).isDirectory()) {
@@ -1614,10 +1614,12 @@ production.
 }
 
 // src/lib/impersonate-state.ts
+import { createHash } from "crypto";
 import {
   chmodSync,
   existsSync as existsSync2,
   mkdirSync as mkdirSync4,
+  readdirSync,
   readFileSync as readFileSync2,
   renameSync,
   rmSync,
@@ -1628,6 +1630,12 @@ import { join as join6 } from "path";
 var IMPERSONATE_ROOT = join6(homedir(), ".augmented-impersonate");
 var ACTIVE_DIR = join6(IMPERSONATE_ROOT, "active");
 var ACTIVE_MANIFEST_PATH = join6(ACTIVE_DIR, "manifest.json");
+var SESSION_FILE_PREFIX = "session-";
+var SESSION_FILE_SUFFIX = ".json";
+function sessionManifestPath(projectCwd) {
+  const hash = createHash("sha256").update(projectCwd).digest("hex").slice(0, 16);
+  return join6(ACTIVE_DIR, `${SESSION_FILE_PREFIX}${hash}${SESSION_FILE_SUFFIX}`);
+}
 var CODE_NAME_RE = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
 function assertValidCodeName(codeName) {
   if (!CODE_NAME_RE.test(codeName)) {
@@ -1651,36 +1659,84 @@ function ensureImpersonateWorkdir(codeName) {
   mkdirSync4(dir, { recursive: true });
   return dir;
 }
-function readActiveManifest() {
-  if (!existsSync2(ACTIVE_MANIFEST_PATH)) return null;
+function validateManifest(parsed) {
+  if (typeof parsed !== "object" || parsed === null) return null;
+  const m = parsed;
+  const backupsOk = typeof m.backups === "object" && m.backups !== null && Object.values(m.backups).every(
+    (v) => v === "had-file" || v === "was-symlink" || v === "didnt-exist"
+  );
+  if (typeof m.code_name !== "string" || typeof m.agent_id !== "string" || typeof m.team_id !== "string" || typeof m.token !== "string" || typeof m.expires_at !== "number" || typeof m.session_id !== "string" || typeof m.minted_at !== "string" || typeof m.project_cwd !== "string" || // ENG-5688 (redesigned): host required so `exit` calls /stop against
+  // the right environment. Required, not optional, because writing the
+  // wrong host on an existing session would point exit at a server
+  // that has no record of the session — silently misleading.
+  typeof m.host !== "string" || m.host.length === 0 || !backupsOk) {
+    return null;
+  }
+  return parsed;
+}
+function readManifestFile(path) {
+  if (!existsSync2(path)) return null;
   try {
-    const raw = readFileSync2(ACTIVE_MANIFEST_PATH, "utf-8");
-    const parsed = JSON.parse(raw);
-    const backupsOk = typeof parsed.backups === "object" && parsed.backups !== null && Object.values(parsed.backups).every(
-      (v) => v === "had-file" || v === "was-symlink" || v === "didnt-exist"
-    );
-    if (typeof parsed.code_name !== "string" || typeof parsed.agent_id !== "string" || typeof parsed.team_id !== "string" || typeof parsed.token !== "string" || typeof parsed.expires_at !== "number" || typeof parsed.session_id !== "string" || typeof parsed.minted_at !== "string" || typeof parsed.project_cwd !== "string" || // ENG-5688 (redesigned): host required so `exit` calls /stop against
-    // the right environment. Required, not optional, because writing the
-    // wrong host on an existing session would point exit at a server
-    // that has no record of the session — silently misleading.
-    typeof parsed.host !== "string" || parsed.host.length === 0 || !backupsOk) {
-      return null;
-    }
-    return parsed;
+    return validateManifest(JSON.parse(readFileSync2(path, "utf-8")));
   } catch {
     return null;
   }
 }
+function migrateLegacyManifest() {
+  if (!existsSync2(ACTIVE_MANIFEST_PATH)) return;
+  const legacy = readManifestFile(ACTIVE_MANIFEST_PATH);
+  try {
+    if (!legacy) {
+      rmSync(ACTIVE_MANIFEST_PATH, { force: true });
+      return;
+    }
+    const target = sessionManifestPath(legacy.project_cwd);
+    if (!existsSync2(target)) {
+      mkdirSync4(ACTIVE_DIR, { recursive: true, mode: 448 });
+      renameSync(ACTIVE_MANIFEST_PATH, target);
+      chmodSync(target, 384);
+    } else {
+      rmSync(ACTIVE_MANIFEST_PATH, { force: true });
+    }
+  } catch {
+  }
+}
+function readActiveManifest(projectCwd) {
+  migrateLegacyManifest();
+  return readManifestFile(sessionManifestPath(projectCwd));
+}
+function listActiveManifests() {
+  migrateLegacyManifest();
+  let entries;
+  try {
+    entries = readdirSync(ACTIVE_DIR);
+  } catch {
+    return [];
+  }
+  const out = [];
+  for (const entry of entries) {
+    if (!entry.startsWith(SESSION_FILE_PREFIX) || !entry.endsWith(SESSION_FILE_SUFFIX)) {
+      continue;
+    }
+    const manifest = readManifestFile(join6(ACTIVE_DIR, entry));
+    if (manifest) out.push(manifest);
+  }
+  return out;
+}
 function writeActiveManifest(manifest) {
+  migrateLegacyManifest();
   mkdirSync4(ACTIVE_DIR, { recursive: true, mode: 448 });
-  const tmp = ACTIVE_MANIFEST_PATH + ".tmp";
+  const path = sessionManifestPath(manifest.project_cwd);
+  const tmp = path + ".tmp";
   writeFileSync4(tmp, JSON.stringify(manifest, null, 2), { mode: 384 });
   chmodSync(tmp, 384);
-  renameSync(tmp, ACTIVE_MANIFEST_PATH);
+  renameSync(tmp, path);
 }
-function clearActiveManifest() {
-  if (existsSync2(ACTIVE_MANIFEST_PATH)) {
-    rmSync(ACTIVE_MANIFEST_PATH);
+function clearActiveManifest(projectCwd) {
+  migrateLegacyManifest();
+  const path = sessionManifestPath(projectCwd);
+  if (existsSync2(path)) {
+    rmSync(path);
   }
 }
 function isExpired(manifest, now = Date.now()) {
@@ -1780,7 +1836,7 @@ import {
   copyFileSync,
   existsSync as existsSync4,
   mkdirSync as mkdirSync5,
-  readdirSync,
+  readdirSync as readdirSync2,
   readFileSync as readFileSync3,
   renameSync as renameSync3,
   rmdirSync,
@@ -1838,7 +1894,7 @@ function unregisterIntroduceHook(backup) {
   if (created_claude_dir) {
     const claudeDir = dirOf(settings_path);
     try {
-      if (existsSync4(claudeDir) && readdirSync(claudeDir).length === 0) {
+      if (existsSync4(claudeDir) && readdirSync2(claudeDir).length === 0) {
         rmdirSync(claudeDir);
       }
     } catch {
@@ -1874,7 +1930,7 @@ import {
   copyFileSync as copyFileSync2,
   existsSync as existsSync5,
   mkdirSync as mkdirSync6,
-  readdirSync as readdirSync2,
+  readdirSync as readdirSync3,
   readFileSync as readFileSync4,
   renameSync as renameSync4,
   rmdirSync as rmdirSync2,
@@ -1944,7 +2000,7 @@ function unregisterStatusLine(backup) {
   if (created_claude_dir) {
     const claudeDir = dirname2(settings_path);
     try {
-      if (existsSync5(claudeDir) && readdirSync2(claudeDir).length === 0) {
+      if (existsSync5(claudeDir) && readdirSync3(claudeDir).length === 0) {
         rmdirSync2(claudeDir);
       }
     } catch {
@@ -2115,13 +2171,15 @@ async function impersonateConnectCommand(token, options = {}) {
     process.exitCode = 1;
     return;
   }
-  const existing = readActiveManifest();
-  if (existing) {
-    const msg = `An impersonation session is already active (${existing.code_name}). Run \`agt impersonate exit\` first.`;
-    if (json) jsonOutput({ ok: false, error: msg });
-    else error(msg);
-    process.exitCode = 1;
-    return;
+  if (!options.workdir) {
+    const existing = readActiveManifest(process.cwd());
+    if (existing) {
+      const msg = `An impersonation session is already active in this directory (${existing.code_name}). Run \`agt impersonate exit\` here first, or connect from a different directory.`;
+      if (json) jsonOutput({ ok: false, error: msg });
+      else error(msg);
+      process.exitCode = 1;
+      return;
+    }
   }
   if (!options.workdir) {
     const workTreeRoot = findGitWorkTreeRoot(process.cwd());
@@ -2182,6 +2240,15 @@ async function impersonateConnectCommand(token, options = {}) {
   );
   spinner.text = "Swapping persona files\u2026";
   const projectCwd = options.workdir ? ensureImpersonateWorkdir(bundle.agent.code_name) : process.cwd();
+  const existingForTarget = readActiveManifest(projectCwd);
+  if (existingForTarget) {
+    spinner.fail("Impersonation already active for this agent.");
+    const msg = `An impersonation session is already active in ${projectCwd} (${existingForTarget.code_name}). Run \`agt impersonate exit\` there first.`;
+    if (json) jsonOutput({ ok: false, error: msg });
+    else error(msg);
+    process.exitCode = 1;
+    return;
+  }
   const backups = {};
   const swapped = [];
   let hookBackup;
@@ -2303,33 +2370,8 @@ async function impersonateConnectCommand(token, options = {}) {
   console.log();
   info("When done: `agt impersonate exit` (still active).");
 }
-async function impersonateCurrentCommand() {
-  requireImpersonateEnabled();
-  const json = isJsonMode();
-  const manifest = readActiveManifest();
-  if (!manifest) {
-    if (json) jsonOutput({ ok: true, active: null });
-    else info("No active impersonation.");
-    return;
-  }
+function printManifestText(manifest) {
   const expired = isExpired(manifest);
-  if (json) {
-    jsonOutput({
-      ok: true,
-      active: {
-        code_name: manifest.code_name,
-        agent_id: manifest.agent_id,
-        team_id: manifest.team_id,
-        session_id: manifest.session_id,
-        minted_at: manifest.minted_at,
-        expires_at: manifest.expires_at,
-        expired,
-        project_cwd: manifest.project_cwd,
-        host: manifest.host
-      }
-    });
-    return;
-  }
   console.log();
   console.log(chalk10.bold(`Impersonating: ${manifest.code_name}`));
   console.log(`  Agent ID:    ${chalk10.dim(manifest.agent_id)}`);
@@ -2343,10 +2385,83 @@ async function impersonateCurrentCommand() {
   console.log(`  Host:        ${chalk10.dim(manifest.host)}`);
   console.log();
 }
-async function impersonateExitCommand() {
+function manifestToJson(manifest) {
+  return {
+    code_name: manifest.code_name,
+    agent_id: manifest.agent_id,
+    team_id: manifest.team_id,
+    session_id: manifest.session_id,
+    minted_at: manifest.minted_at,
+    expires_at: manifest.expires_at,
+    expired: isExpired(manifest),
+    project_cwd: manifest.project_cwd,
+    host: manifest.host
+  };
+}
+async function impersonateCurrentCommand(opts = {}) {
+  requireImpersonateEnabled();
+  const json = isJsonMode();
+  if (opts.all) {
+    const manifests = listActiveManifests();
+    if (json) {
+      jsonOutput({ ok: true, active: manifests.map(manifestToJson) });
+      return;
+    }
+    if (manifests.length === 0) {
+      info("No active impersonations.");
+      return;
+    }
+    console.log();
+    console.log(chalk10.bold(`Active impersonations (${manifests.length}):`));
+    for (const m of manifests) printManifestText(m);
+    return;
+  }
+  const manifest = readActiveManifest(process.cwd());
+  if (!manifest) {
+    const others = listActiveManifests();
+    if (json) {
+      jsonOutput({ ok: true, active: null, others_active: others.length });
+      return;
+    }
+    if (others.length > 0) {
+      info(
+        `No active impersonation in this directory \u2014 ${others.length} active elsewhere. Run \`agt impersonate current --all\` to list them.`
+      );
+    } else {
+      info("No active impersonation.");
+    }
+    return;
+  }
+  if (json) {
+    jsonOutput({ ok: true, active: manifestToJson(manifest) });
+    return;
+  }
+  printManifestText(manifest);
+}
+async function impersonateExitCommand(opts = {}) {
   requireImpersonateEnabled();
   const json = isJsonMode();
-  const manifest = readActiveManifest();
+  if (opts.all) {
+    const manifests = listActiveManifests();
+    if (manifests.length === 0) {
+      if (json) jsonOutput({ ok: true, was_active: false, exited: [] });
+      else info("No active impersonation to exit.");
+      return;
+    }
+    const exited = [];
+    for (const manifest2 of manifests) {
+      await performImpersonateExit(manifest2, { json, silent: true });
+      exited.push(manifest2.code_name);
+    }
+    if (json) {
+      jsonOutput({ ok: true, was_active: true, exited });
+    } else {
+      success(`Exited ${exited.length} impersonation session(s): ${exited.join(", ")}`);
+      info("Restart Claude Code to pick up your original persona.");
+    }
+    return;
+  }
+  const manifest = readActiveManifest(process.cwd());
   if (!manifest) {
     if (json) jsonOutput({ ok: true, was_active: false });
     else info("No active impersonation to exit.");
@@ -2412,7 +2527,7 @@ async function performImpersonateExit(manifest, opts) {
       if (!json) error(`Failed to remove introduce hook: ${msg}`);
     }
   }
-  clearActiveManifest();
+  clearActiveManifest(manifest.project_cwd);
   if (silent) return;
   if (json) {
     jsonOutput({
@@ -2435,28 +2550,31 @@ async function performImpersonateExit(manifest, opts) {
   info("Restart Claude Code to pick up your original persona.");
 }
 async function autoExitExpiredImpersonation() {
-  let manifest;
+  let manifests;
   try {
-    manifest = readActiveManifest();
+    manifests = listActiveManifests();
   } catch {
     return;
   }
-  if (!manifest || !isExpired(manifest)) return;
-  try {
-    if (!isJsonMode()) {
-      console.error(
-        chalk10.cyan(
-          `\u2139 Impersonation session for ${manifest.code_name} expired \u2014 auto-exiting and restoring your files.`
-        )
-      );
+  const expired = manifests.filter((m) => isExpired(m));
+  if (expired.length === 0) return;
+  for (const manifest of expired) {
+    try {
+      if (!isJsonMode()) {
+        console.error(
+          chalk10.cyan(
+            `\u2139 Impersonation session for ${manifest.code_name} expired \u2014 auto-exiting and restoring your files.`
+          )
+        );
+      }
+      await performImpersonateExit(manifest, { json: isJsonMode(), silent: true });
+    } catch {
     }
-    await performImpersonateExit(manifest, { json: isJsonMode(), silent: true });
-  } catch {
   }
 }
 async function impersonateIntroduceCommand() {
   try {
-    const manifest = readActiveManifest();
+    const manifest = readActiveManifest(process.cwd());
     if (!manifest || isExpired(manifest)) return;
     const cwd = manifest.project_cwd;
     const identity = readClaudeMdIdentity(join10(cwd, "CLAUDE.md"));
@@ -2529,13 +2647,13 @@ import ora11 from "ora";
 
 // ../../packages/core/dist/drift/live-state-reader.js
 import { readFile } from "fs/promises";
-import { createHash } from "crypto";
+import { createHash as createHash2 } from "crypto";
 import { join as join11 } from "path";
 import JSON5 from "json5";
 async function hashFile(filePath) {
   try {
     const content = await readFile(filePath);
-    return createHash("sha256").update(content).digest("hex");
+    return createHash2("sha256").update(content).digest("hex");
   } catch {
     return null;
   }
@@ -4720,7 +4838,7 @@ import { execFileSync, execSync } from "child_process";
 import { existsSync as existsSync10, realpathSync as realpathSync2 } from "fs";
 import chalk18 from "chalk";
 import ora16 from "ora";
-var cliVersion = true ? "0.27.58" : "dev";
+var cliVersion = true ? "0.27.59" : "dev";
 async function fetchLatestVersion() {
   const host2 = getHost();
   if (!host2) return null;
@@ -4956,7 +5074,7 @@ import { homedir as homedir6 } from "os";
 import { join as join16 } from "path";
 
 // src/lib/subagent-mcp-audit.ts
-import { readdirSync as readdirSync3, readFileSync as readFileSync9, statSync as statSync2 } from "fs";
+import { readdirSync as readdirSync4, readFileSync as readFileSync9, statSync as statSync2 } from "fs";
 import { join as join15 } from "path";
 function parseFrontmatter(content) {
   const match = content.match(/^---\r?\n([\s\S]*?)\r?\n---/);
@@ -5000,7 +5118,7 @@ function findSubagentFiles(dir, depth = 0) {
   if (depth > 6) return [];
   let entries;
   try {
-    entries = readdirSync3(dir);
+    entries = readdirSync4(dir);
   } catch {
     return [];
   }
@@ -5093,7 +5211,7 @@ async function auditSubagentsCommand(options = {}) {
 }
 
 // src/lib/mcp-render-allowlist-audit.ts
-import { readdirSync as readdirSync4, readFileSync as readFileSync10, statSync as statSync3 } from "fs";
+import { readdirSync as readdirSync5, readFileSync as readFileSync10, statSync as statSync3 } from "fs";
 import { homedir as homedir7 } from "os";
 import { join as join17 } from "path";
 function expectedWildcard(serverKey) {
@@ -5118,7 +5236,7 @@ function auditMcpRenderAllowlist(rootDir = join17(homedir7(), ".augmented")) {
   const findings = [];
   let entries;
   try {
-    entries = readdirSync4(rootDir);
+    entries = readdirSync5(rootDir);
   } catch {
     return findings;
   }
@@ -5498,7 +5616,7 @@ function handleError(err) {
 }
 
 // src/bin/agt.ts
-var cliVersion2 = true ? "0.27.58" : "dev";
+var cliVersion2 = true ? "0.27.59" : "dev";
 var program = new Command();
 program.name("agt").description("Augmented CLI \u2014 agent provisioning and management").version(cliVersion2).option("--json", "Emit machine-readable JSON output (suppress spinners and colors)").option("--skip-update-check", "Skip the automatic update check on startup");
 program.hook("preAction", async (thisCommand, actionCommand) => {
@@ -5551,8 +5669,12 @@ impersonate.command("connect <token>").description(
     })
   )
 );
-impersonate.command("current").description('Print the active impersonation (or "none")').action(impersonateCurrentCommand);
-impersonate.command("exit").description("End the active impersonation, restore project files, and notify the server").action(impersonateExitCommand);
+impersonate.command("current").description('Print the active impersonation for this directory (or "none")').option("--all", "List every active impersonation session on this machine").action(
+  (opts) => impersonateCurrentCommand({ all: opts.all === true })
+);
+impersonate.command("exit").description("End this directory's impersonation, restore project files, and notify the server").option("--all", "Exit every active impersonation session on this machine").action(
+  (opts) => impersonateExitCommand({ all: opts.all === true })
+);
 impersonate.command("introduce", { hidden: true }).description("Print the impersonated agent's self-introduction (SessionStart hook target)").action(impersonateIntroduceCommand);
 program.command("init").description("Create a new agent (interactive wizard, or non-interactive with --name)").option("--name <display-name>", "Agent display name (triggers non-interactive mode)").option("--code-name <code-name>", "Agent code name (kebab-case, derived from --name if omitted)").option("--description <text>", "Short agent description").option("--env <environment>", "Environment: dev | stage | prod", "dev").option("--risk-tier <tier>", "Risk tier: Low | Medium | High", "Low").option("--budget-type <type>", "Budget type: tokens | dollars | both", "tokens").option("--budget-tokens <number>", "Token budget limit", "10000").option("--budget-dollars <number>", "Dollar budget limit", "10").option("--budget-window <window>", "Budget window: daily | weekly | monthly", "daily").option("--budget-enforcement <mode>", "Budget enforcement: block | throttle | alert | degrade", "block").option("--channels <list>", "Comma-separated channel IDs").option("--logging <mode>", "Logging mode: redacted | hash-only | full-local", "redacted").action(initCommand);
 program.command("lint").argument("[path]", "Path to agent directory (default: all agents in .augmented/)").description("Lint CHARTER.md and TOOLS.md files").action(lintCommand);