@integrity-labs/agt-cli 0.27.65 → 0.27.67

package/dist/{chunk-UMFTYZO7.js → chunk-EYWW624B.js}

@@ -9,7 +9,7 @@ import {
   parseDeliveryTarget,
   registerFramework,
   wrapScheduledTaskPrompt
-} from "./chunk-PM3CC2SJ.js";
+} from "./chunk-KPD5KJY7.js";
 
 // ../../packages/core/dist/integrations/registry.js
 var INTEGRATION_REGISTRY = [
@@ -2356,6 +2356,212 @@ function extractAllowedDomains(input) {
 }
 registerFramework(nemoClawAdapter);
 
+// ../../packages/core/dist/provisioning/mcp-config-guards.js
+import { chmodSync as chmodSync4, existsSync as existsSync4, readFileSync as readFileSync4, renameSync as renameSync3, writeFileSync as writeFileSync4, unlinkSync as unlinkSync3 } from "fs";
+var MCP_FILE_MODE = 384;
+var REQUIRED_ENV_RULES_BY_SERVER = {
+  "cloud-broker": [
+    { key: "AGT_HOST", mustBeConcrete: false },
+    { key: "AGT_API_KEY", mustBeConcrete: false },
+    // ENG-4744: this is the bug shape — writer used to omit this
+    // entirely, or render it as a literal `${AGT_AGENT_ID}` instead
+    // of the agent's real UUID. The broker has no way to substitute
+    // it post-spawn, so a placeholder here = silently broken agent.
+    { key: "AGT_AGENT_ID", mustBeConcrete: true }
+  ]
+};
+var PLACEHOLDER_RE = /\$\{[^}]+\}/;
+function validateRenderedMcpConfig(config) {
+  const errors = [];
+  if (typeof config !== "object" || config === null || Array.isArray(config)) {
+    return {
+      ok: false,
+      errors: [
+        {
+          kind: "invalid_json_shape",
+          server: "*",
+          message: "config root must be a non-null object"
+        }
+      ]
+    };
+  }
+  const root = config;
+  if (root.mcpServers === void 0) {
+    return { ok: true };
+  }
+  if (typeof root.mcpServers !== "object" || root.mcpServers === null) {
+    return {
+      ok: false,
+      errors: [
+        {
+          kind: "invalid_json_shape",
+          server: "*",
+          message: "mcpServers must be an object"
+        }
+      ]
+    };
+  }
+  if (Array.isArray(root.mcpServers)) {
+    return {
+      ok: false,
+      errors: [
+        {
+          kind: "invalid_json_shape",
+          server: "*",
+          message: "mcpServers must be an object"
+        }
+      ]
+    };
+  }
+  for (const [serverKey, raw] of Object.entries(root.mcpServers)) {
+    if (typeof raw !== "object" || raw === null || Array.isArray(raw)) {
+      errors.push({
+        kind: "invalid_json_shape",
+        server: serverKey,
+        message: `entry must be an object`
+      });
+      continue;
+    }
+    const entry = raw;
+    const entryRecord = entry;
+    if (typeof entryRecord["url"] === "string") {
+      const type = entryRecord["type"];
+      if (type !== "http" && type !== "sse") {
+        errors.push({
+          kind: "remote_mcp_missing_type",
+          server: serverKey,
+          message: `url-based entry must include \`type: "http"\` or \`type: "sse"\` (Claude Code MCP schema requires it)`
+        });
+      }
+    }
+    const rules = REQUIRED_ENV_RULES_BY_SERVER[serverKey];
+    if (rules) {
+      const env = entry.env ?? {};
+      for (const rule of rules) {
+        const value = env[rule.key];
+        if (typeof value !== "string" || value.length === 0) {
+          errors.push({
+            kind: "missing_required_env",
+            server: serverKey,
+            message: `missing required env key: ${rule.key}`
+          });
+          continue;
+        }
+        if (rule.mustBeConcrete && PLACEHOLDER_RE.test(value)) {
+          errors.push({
+            kind: "unexpanded_placeholder",
+            server: serverKey,
+            message: `env.${rule.key} contains an unexpanded \${...} placeholder; expected a concrete value`
+          });
+        }
+      }
+    }
+  }
+  return errors.length === 0 ? { ok: true } : { ok: false, errors };
+}
+function formatValidationErrors(errors) {
+  return errors.map((e) => `${e.server}:${e.kind}=${e.message}`).join("; ");
+}
+function safeWriteJsonAtomic(path, content, opts = {}) {
+  const keepBackup = opts.keepBackup !== false;
+  const rename = opts.renamer ?? renameSync3;
+  const tmpPath = `${path}.new`;
+  const bakPath = `${path}.bak`;
+  let movedOriginalToBackup = false;
+  try {
+    writeFileSync4(tmpPath, content);
+    if (opts.mode !== void 0) {
+      chmodSync4(tmpPath, opts.mode);
+    }
+  } catch (err) {
+    try {
+      if (existsSync4(tmpPath))
+        unlinkSync3(tmpPath);
+    } catch {
+    }
+    throw err;
+  }
+  try {
+    if (keepBackup && existsSync4(path)) {
+      rename(path, bakPath);
+      movedOriginalToBackup = true;
+    }
+    rename(tmpPath, path);
+  } catch (err) {
+    try {
+      if (existsSync4(tmpPath))
+        unlinkSync3(tmpPath);
+    } catch {
+    }
+    if (movedOriginalToBackup && !existsSync4(path) && existsSync4(bakPath)) {
+      try {
+        renameSync3(bakPath, path);
+      } catch {
+      }
+    }
+    throw err;
+  }
+}
+function safeWriteMcpJson(path, config) {
+  const validation = validateRenderedMcpConfig(config);
+  if (!validation.ok) {
+    return { written: false, errors: validation.errors };
+  }
+  safeWriteJsonAtomic(path, JSON.stringify(config, null, 2), { mode: MCP_FILE_MODE });
+  return { written: true, errors: [] };
+}
+var SECRET_FIELD_NAME_RE = /TOKEN|KEY|SECRET|BEARER|PASSWORD/i;
+function collectSecretFields(config) {
+  const out = /* @__PURE__ */ new Map();
+  if (typeof config !== "object" || config === null)
+    return out;
+  const servers = config.mcpServers;
+  if (typeof servers !== "object" || servers === null)
+    return out;
+  for (const [server, raw] of Object.entries(servers)) {
+    if (typeof raw !== "object" || raw === null)
+      continue;
+    const entry = raw;
+    for (const [block, location] of [
+      [entry.env, "env"],
+      [entry.headers, "header"]
+    ]) {
+      if (!block)
+        continue;
+      for (const [field, value] of Object.entries(block)) {
+        if (typeof value !== "string")
+          continue;
+        if (!SECRET_FIELD_NAME_RE.test(field))
+          continue;
+        out.set(`${server}\0${field}`, { location, value });
+      }
+    }
+  }
+  return out;
+}
+function mcpMirrorParityErrors(provision2, project) {
+  const a = collectSecretFields(provision2);
+  const b = collectSecretFields(project);
+  const mismatches = [];
+  const keys = /* @__PURE__ */ new Set([...a.keys(), ...b.keys()]);
+  for (const key of keys) {
+    const [server, field] = key.split("\0");
+    const pv = a.get(key);
+    const pj = b.get(key);
+    if (pv && !pj) {
+      mismatches.push({ server, field, location: pv.location, reason: "missing-in-project" });
+    } else if (!pv && pj) {
+      mismatches.push({ server, field, location: pj.location, reason: "missing-in-provision" });
+    } else if (pv && pj && pv.value !== pj.value) {
+      mismatches.push({ server, field, location: pv.location, reason: "value-diverges" });
+    }
+  }
+  return mismatches;
+}
+function formatMirrorMismatch(m) {
+  return `[mcp-mirror] [parity-violation] server=${m.server} field=${m.field} location=${m.location} reason=${m.reason}`;
+}
+
 // ../../packages/core/dist/provisioning/frameworks/claudecode/identity.js
 function buildMemorySection(hasQmd) {
   const recall = hasQmd ? `### Recall
@@ -3324,15 +3530,21 @@ When you receive a request via any channel (Slack, Telegram, direct chat):
 3. **Create the kanban task** with kanban.add. Title should be specific
    enough to be self-explanatory \u2014 "Pull Linear ENG sprint velocity for
    this fortnight" beats "Linear stats".
-4. Reply in the channel thread: "On it \u2014 tracking here: ${kanbanUrl ?? "my kanban board"}" (include the created task title)
+4. Reply in the channel thread with a brief acknowledgement that names the
+   created task: "On it \u2014 <task title>".
+   - **On Slack, do NOT paste the kanban URL.** A progress card with an
+     **Open card** button is posted into the thread automatically when the
+     task is channel-sourced \u2014 a pasted link on top of it is duplicate noise.
+   - On channels without a progress card (Telegram, direct chat), include
+     the tracking link: "On it \u2014 tracking here: ${kanbanUrl ?? "my kanban board"}".
 5. Move the task to in_progress with kanban.move
 6. Do the work
 7. Mark done with kanban.done including a result summary
 8. Reply in the channel thread with the result
 
 Everything that isn't exempt gets a task \u2014 but only after the request is
-clear. Don't bury a clarifying question underneath a "tracking here" reply;
-ask the question alone, no kanban link, and let the user answer before
+clear. Don't bury a clarifying question underneath an "on it" acknowledgement;
+ask the question alone, no task created yet, and let the user answer before
 anything goes on the board.
 
 When asked about existing work, tasks, or what you've been doing \u2014 call kanban.list
@@ -3458,157 +3670,11 @@ ${frontmatter.environment === "prod" ? "- Production environment: exercise extra
 }
 
 // ../../packages/core/dist/provisioning/frameworks/claudecode/index.js
-import { readFileSync as readFileSync5, writeFileSync as writeFileSync5, mkdirSync as mkdirSync4, existsSync as existsSync5, chmodSync as chmodSync4, readdirSync, rmSync, copyFileSync } from "fs";
+import { readFileSync as readFileSync5, writeFileSync as writeFileSync5, mkdirSync as mkdirSync4, existsSync as existsSync5, chmodSync as chmodSync5, readdirSync, rmSync, copyFileSync } from "fs";
 import { join as join4, relative, dirname as dirname4 } from "path";
 import { homedir as homedir3 } from "os";
 import { execFile as execFile3 } from "child_process";
 
-// ../../packages/core/dist/provisioning/mcp-config-guards.js
-import { existsSync as existsSync4, readFileSync as readFileSync4, renameSync as renameSync3, writeFileSync as writeFileSync4, unlinkSync as unlinkSync3 } from "fs";
-var REQUIRED_ENV_RULES_BY_SERVER = {
-  "cloud-broker": [
-    { key: "AGT_HOST", mustBeConcrete: false },
-    { key: "AGT_API_KEY", mustBeConcrete: false },
-    // ENG-4744: this is the bug shape — writer used to omit this
-    // entirely, or render it as a literal `${AGT_AGENT_ID}` instead
-    // of the agent's real UUID. The broker has no way to substitute
-    // it post-spawn, so a placeholder here = silently broken agent.
-    { key: "AGT_AGENT_ID", mustBeConcrete: true }
-  ]
-};
-var PLACEHOLDER_RE = /\$\{[^}]+\}/;
-function validateRenderedMcpConfig(config) {
-  const errors = [];
-  if (typeof config !== "object" || config === null || Array.isArray(config)) {
-    return {
-      ok: false,
-      errors: [
-        {
-          kind: "invalid_json_shape",
-          server: "*",
-          message: "config root must be a non-null object"
-        }
-      ]
-    };
-  }
-  const root = config;
-  if (root.mcpServers === void 0) {
-    return { ok: true };
-  }
-  if (typeof root.mcpServers !== "object" || root.mcpServers === null) {
-    return {
-      ok: false,
-      errors: [
-        {
-          kind: "invalid_json_shape",
-          server: "*",
-          message: "mcpServers must be an object"
-        }
-      ]
-    };
-  }
-  if (Array.isArray(root.mcpServers)) {
-    return {
-      ok: false,
-      errors: [
-        {
-          kind: "invalid_json_shape",
-          server: "*",
-          message: "mcpServers must be an object"
-        }
-      ]
-    };
-  }
-  for (const [serverKey, raw] of Object.entries(root.mcpServers)) {
-    if (typeof raw !== "object" || raw === null || Array.isArray(raw)) {
-      errors.push({
-        kind: "invalid_json_shape",
-        server: serverKey,
-        message: `entry must be an object`
-      });
-      continue;
-    }
-    const entry = raw;
-    const entryRecord = entry;
-    if (typeof entryRecord["url"] === "string") {
-      const type = entryRecord["type"];
-      if (type !== "http" && type !== "sse") {
-        errors.push({
-          kind: "remote_mcp_missing_type",
-          server: serverKey,
-          message: `url-based entry must include \`type: "http"\` or \`type: "sse"\` (Claude Code MCP schema requires it)`
-        });
-      }
-    }
-    const rules = REQUIRED_ENV_RULES_BY_SERVER[serverKey];
-    if (rules) {
-      const env = entry.env ?? {};
-      for (const rule of rules) {
-        const value = env[rule.key];
-        if (typeof value !== "string" || value.length === 0) {
-          errors.push({
-            kind: "missing_required_env",
-            server: serverKey,
-            message: `missing required env key: ${rule.key}`
-          });
-          continue;
-        }
-        if (rule.mustBeConcrete && PLACEHOLDER_RE.test(value)) {
-          errors.push({
-            kind: "unexpanded_placeholder",
-            server: serverKey,
-            message: `env.${rule.key} contains an unexpanded \${...} placeholder; expected a concrete value`
-          });
-        }
-      }
-    }
-  }
-  return errors.length === 0 ? { ok: true } : { ok: false, errors };
-}
-function formatValidationErrors(errors) {
-  return errors.map((e) => `${e.server}:${e.kind}=${e.message}`).join("; ");
-}
-function safeWriteJsonAtomic(path, content, opts = {}) {
-  const keepBackup = opts.keepBackup !== false;
-  const rename = opts.renamer ?? renameSync3;
-  const tmpPath = `${path}.new`;
-  const bakPath = `${path}.bak`;
-  let movedOriginalToBackup = false;
-  try {
-    writeFileSync4(tmpPath, content);
-  } catch (err) {
-    throw err;
-  }
-  try {
-    if (keepBackup && existsSync4(path)) {
-      rename(path, bakPath);
-      movedOriginalToBackup = true;
-    }
-    rename(tmpPath, path);
-  } catch (err) {
-    try {
-      if (existsSync4(tmpPath))
-        unlinkSync3(tmpPath);
-    } catch {
-    }
-    if (movedOriginalToBackup && !existsSync4(path) && existsSync4(bakPath)) {
-      try {
-        renameSync3(bakPath, path);
-      } catch {
-      }
-    }
-    throw err;
-  }
-}
-function safeWriteMcpJson(path, config) {
-  const validation = validateRenderedMcpConfig(config);
-  if (!validation.ok) {
-    return { written: false, errors: validation.errors };
-  }
-  safeWriteJsonAtomic(path, JSON.stringify(config, null, 2));
-  return { written: true, errors: [] };
-}
-
 // ../../packages/core/dist/provisioning/remote-mcp.js
 function envVarForToken(definitionId) {
   return `${definitionId.replace(/-/g, "_").toUpperCase()}_ACCESS_TOKEN`;
@@ -3788,7 +3854,19 @@ function syncMcpToProject(codeName) {
   try {
     const content = readFileSync5(provisionMcpPath, "utf-8");
     mkdirSync4(projectDir, { recursive: true });
-    writeFileSync5(projectMcpPath, content);
+    writeFileSync5(projectMcpPath, content, { mode: MCP_FILE_MODE });
+    try {
+      chmodSync5(projectMcpPath, MCP_FILE_MODE);
+    } catch {
+    }
+    try {
+      const mismatches = mcpMirrorParityErrors(JSON.parse(content), JSON.parse(readFileSync5(projectMcpPath, "utf-8")));
+      for (const m of mismatches) {
+        process.stderr.write(`${formatMirrorMismatch(m)} agent=${codeName}
+`);
+      }
+    } catch {
+    }
   } catch {
   }
   renderChannelMessageHandlerForAgent(codeName);
@@ -3898,7 +3976,15 @@ function deployArtifactsToProject(codeName, provisionDir) {
           continue;
         }
       }
-      writeFileSync5(dest, srcContent);
+      if (file === ".mcp.json") {
+        writeFileSync5(dest, srcContent, { mode: MCP_FILE_MODE });
+        try {
+          chmodSync5(dest, MCP_FILE_MODE);
+        } catch {
+        }
+      } else {
+        writeFileSync5(dest, srcContent);
+      }
     } catch {
     }
   }
@@ -4006,7 +4092,7 @@ function deployArtifactsToProject(codeName, provisionDir) {
       const upToDate = existsSync5(hookDest) && readFileSync5(hookDest, "utf-8") === srcContent;
       if (!upToDate)
         writeFileSync5(hookDest, srcContent);
-      chmodSync4(hookDest, 493);
+      chmodSync5(hookDest, 493);
     }
   } catch {
   }
@@ -4606,7 +4692,7 @@ Your \`tools:\` allowlist (above) names every MCP server the parent has connecte
 
 ## Hard rules \u2014 Credential Access Control
 
-1. **Never** read raw secrets out of \`.mcp.json\`, \`~/.augmented/*/provision/.mcp.json\`, or any agent config file. Those files contain bot tokens, API keys, and OAuth credentials. The Credential Access Control guardrail (\`block_read: true\` on secrets) treats reads of those values as a violation regardless of intent.
+1. **Never** read raw secrets out of \`.mcp.json\`, \`~/.augmented/*/provision/.mcp.json\`, \`.env.integrations\`, or any agent config file. Those files contain bot tokens, API keys, and OAuth credentials. The Credential Access Control guardrail (\`block_read: true\` on secrets) treats reads of those values as a violation regardless of intent. As **defence-in-depth (not structural enforcement)**, the plugin's \`settings.json\` also denies \`Bash(cat:*/.mcp.json)\`, \`Bash(cat:*/.env.integrations)\`, and \`Bash(jq:*/.mcp.json)\` (ENG-5901 / ADR-0018) \u2014 these block the obvious copy-paste paths but a determined in-process reader can still reach the values; the durable fix is Phase 2/3 of ADR-0018.
 2. **Never** post Slack messages via raw \`chat.postMessage\` + a bot token lifted from config. Use the channel MCP's reply tool (\`mcp__slack-channel__slack_reply\`, \`mcp__telegram-channel__telegram_reply\`, \`mcp__direct-chat__direct_chat_reply\`, etc.) so the call goes through the audited path.
 3. If an \`mcp__*\` tool you expect to be available returns "No such tool available.", **stop and surface the gap to the parent** in your summary rather than working around it. A missing MCP binding is a platform bug worth fixing \u2014 it's the exact failure shape this sub-agent was added to prevent (see ENG-5897 / ENG-5905).
 4. When verifying a capability is wired, confirm the relevant env var exists **without printing its value** \u2014 use \`[ -n "$POSTIZ_API_KEY" ] && echo present || echo absent\`, never \`echo $POSTIZ_API_KEY\`. The Credential Access Control guardrail covers tool-call output as well as file reads.
@@ -5021,7 +5107,7 @@ ${sections}`
     if (envLines.length > 1) {
       const envPath = join4(agentDir, ".env");
       writeFileSync5(envPath, envLines.join("\n") + "\n");
-      chmodSync4(envPath, SECRET_FILE_MODE);
+      chmodSync5(envPath, SECRET_FILE_MODE);
     }
   },
   // Claude Code has no gateway process — methods intentionally omitted
@@ -5555,7 +5641,7 @@ ${sections}`
     if (envLines.length > 1) {
       const envPath = join4(agentDir, ".env.integrations");
       writeFileSync5(envPath, envLines.join("\n") + "\n");
-      chmodSync4(envPath, SECRET_FILE_MODE);
+      chmodSync5(envPath, SECRET_FILE_MODE);
     }
     writeXurlStoreForIntegrations(decryptedIntegrations);
     for (const integration of decryptedIntegrations) {
@@ -5754,14 +5840,14 @@ ${sections}`
         mkdirSync4(join4(filePath, ".."), { recursive: true });
         if (isPluginManaged && existsSync5(filePath)) {
           try {
-            chmodSync4(filePath, READ_WRITE_MODE);
+            chmodSync5(filePath, READ_WRITE_MODE);
           } catch {
           }
         }
         writeFileSync5(filePath, file.content);
         if (isPluginManaged) {
           try {
-            chmodSync4(filePath, READ_ONLY_MODE);
+            chmodSync5(filePath, READ_ONLY_MODE);
           } catch {
           }
         }
@@ -5942,7 +6028,7 @@ ${sections}`
       return;
     const tokenPath = join4(agentDir, ".tokens.json");
     writeFileSync5(tokenPath, JSON.stringify(tokens, null, 2));
-    chmodSync4(tokenPath, SECRET_FILE_MODE);
+    chmodSync5(tokenPath, SECRET_FILE_MODE);
   }
 };
 registerFramework(claudeCodeAdapter);
@@ -6520,7 +6606,7 @@ import { homedir as homedir6, userInfo } from "os";
 import { spawn as spawn3 } from "child_process";
 
 // src/lib/watchdog.ts
-import { readFileSync as readFileSync7, writeFileSync as writeFileSync7, unlinkSync as unlinkSync4, existsSync as existsSync7, mkdirSync as mkdirSync6, openSync, closeSync, chmodSync as chmodSync5 } from "fs";
+import { readFileSync as readFileSync7, writeFileSync as writeFileSync7, unlinkSync as unlinkSync4, existsSync as existsSync7, mkdirSync as mkdirSync6, openSync, closeSync, chmodSync as chmodSync6 } from "fs";
 import { join as join7 } from "path";
 import { spawn as spawn2, execFileSync } from "child_process";
 var DEFAULT_CONFIG_DIR = join7(process.env["HOME"] ?? "/tmp", ".augmented");
@@ -6614,7 +6700,7 @@ function startWatchdog(opts) {
     const { logFile } = getManagerPaths(configDir);
     const logFd = openSync(logFile, "a", 384);
     try {
-      chmodSync5(logFile, 384);
+      chmodSync6(logFile, 384);
     } catch {
     }
     const intervalSec = String(Math.max(Math.floor(opts.intervalMs / 1e3), 5));
@@ -7127,6 +7213,7 @@ async function managerUninstallSystemUnitCommand() {
 export {
   getIntegration,
   extractCommandNotFound,
+  safeWriteJsonAtomic,
   INTEGRATIONS_SECTION_START,
   INTEGRATIONS_SECTION_END,
   estimateActiveTasksTokens,
@@ -7163,4 +7250,4 @@ export {
   managerInstallSystemUnitCommand,
   managerUninstallSystemUnitCommand
 };
-//# sourceMappingURL=chunk-UMFTYZO7.js.map
+//# sourceMappingURL=chunk-EYWW624B.js.map