@integrity-labs/agt-cli 0.27.66 → 0.27.68

package/dist/{chunk-TIS3QVYS.js → chunk-GBUPVHIR.js}

@@ -9,7 +9,7 @@ import {
   parseDeliveryTarget,
   registerFramework,
   wrapScheduledTaskPrompt
-} from "./chunk-PM3CC2SJ.js";
+} from "./chunk-KPD5KJY7.js";
 
 // ../../packages/core/dist/integrations/registry.js
 var INTEGRATION_REGISTRY = [
@@ -2356,6 +2356,212 @@ function extractAllowedDomains(input) {
 }
 registerFramework(nemoClawAdapter);
 
+// ../../packages/core/dist/provisioning/mcp-config-guards.js
+import { chmodSync as chmodSync4, existsSync as existsSync4, readFileSync as readFileSync4, renameSync as renameSync3, writeFileSync as writeFileSync4, unlinkSync as unlinkSync3 } from "fs";
+var MCP_FILE_MODE = 384;
+var REQUIRED_ENV_RULES_BY_SERVER = {
+  "cloud-broker": [
+    { key: "AGT_HOST", mustBeConcrete: false },
+    { key: "AGT_API_KEY", mustBeConcrete: false },
+    // ENG-4744: this is the bug shape — writer used to omit this
+    // entirely, or render it as a literal `${AGT_AGENT_ID}` instead
+    // of the agent's real UUID. The broker has no way to substitute
+    // it post-spawn, so a placeholder here = silently broken agent.
+    { key: "AGT_AGENT_ID", mustBeConcrete: true }
+  ]
+};
+var PLACEHOLDER_RE = /\$\{[^}]+\}/;
+function validateRenderedMcpConfig(config) {
+  const errors = [];
+  if (typeof config !== "object" || config === null || Array.isArray(config)) {
+    return {
+      ok: false,
+      errors: [
+        {
+          kind: "invalid_json_shape",
+          server: "*",
+          message: "config root must be a non-null object"
+        }
+      ]
+    };
+  }
+  const root = config;
+  if (root.mcpServers === void 0) {
+    return { ok: true };
+  }
+  if (typeof root.mcpServers !== "object" || root.mcpServers === null) {
+    return {
+      ok: false,
+      errors: [
+        {
+          kind: "invalid_json_shape",
+          server: "*",
+          message: "mcpServers must be an object"
+        }
+      ]
+    };
+  }
+  if (Array.isArray(root.mcpServers)) {
+    return {
+      ok: false,
+      errors: [
+        {
+          kind: "invalid_json_shape",
+          server: "*",
+          message: "mcpServers must be an object"
+        }
+      ]
+    };
+  }
+  for (const [serverKey, raw] of Object.entries(root.mcpServers)) {
+    if (typeof raw !== "object" || raw === null || Array.isArray(raw)) {
+      errors.push({
+        kind: "invalid_json_shape",
+        server: serverKey,
+        message: `entry must be an object`
+      });
+      continue;
+    }
+    const entry = raw;
+    const entryRecord = entry;
+    if (typeof entryRecord["url"] === "string") {
+      const type = entryRecord["type"];
+      if (type !== "http" && type !== "sse") {
+        errors.push({
+          kind: "remote_mcp_missing_type",
+          server: serverKey,
+          message: `url-based entry must include \`type: "http"\` or \`type: "sse"\` (Claude Code MCP schema requires it)`
+        });
+      }
+    }
+    const rules = REQUIRED_ENV_RULES_BY_SERVER[serverKey];
+    if (rules) {
+      const env = entry.env ?? {};
+      for (const rule of rules) {
+        const value = env[rule.key];
+        if (typeof value !== "string" || value.length === 0) {
+          errors.push({
+            kind: "missing_required_env",
+            server: serverKey,
+            message: `missing required env key: ${rule.key}`
+          });
+          continue;
+        }
+        if (rule.mustBeConcrete && PLACEHOLDER_RE.test(value)) {
+          errors.push({
+            kind: "unexpanded_placeholder",
+            server: serverKey,
+            message: `env.${rule.key} contains an unexpanded \${...} placeholder; expected a concrete value`
+          });
+        }
+      }
+    }
+  }
+  return errors.length === 0 ? { ok: true } : { ok: false, errors };
+}
+function formatValidationErrors(errors) {
+  return errors.map((e) => `${e.server}:${e.kind}=${e.message}`).join("; ");
+}
+function safeWriteJsonAtomic(path, content, opts = {}) {
+  const keepBackup = opts.keepBackup !== false;
+  const rename = opts.renamer ?? renameSync3;
+  const tmpPath = `${path}.new`;
+  const bakPath = `${path}.bak`;
+  let movedOriginalToBackup = false;
+  try {
+    writeFileSync4(tmpPath, content);
+    if (opts.mode !== void 0) {
+      chmodSync4(tmpPath, opts.mode);
+    }
+  } catch (err) {
+    try {
+      if (existsSync4(tmpPath))
+        unlinkSync3(tmpPath);
+    } catch {
+    }
+    throw err;
+  }
+  try {
+    if (keepBackup && existsSync4(path)) {
+      rename(path, bakPath);
+      movedOriginalToBackup = true;
+    }
+    rename(tmpPath, path);
+  } catch (err) {
+    try {
+      if (existsSync4(tmpPath))
+        unlinkSync3(tmpPath);
+    } catch {
+    }
+    if (movedOriginalToBackup && !existsSync4(path) && existsSync4(bakPath)) {
+      try {
+        renameSync3(bakPath, path);
+      } catch {
+      }
+    }
+    throw err;
+  }
+}
+function safeWriteMcpJson(path, config) {
+  const validation = validateRenderedMcpConfig(config);
+  if (!validation.ok) {
+    return { written: false, errors: validation.errors };
+  }
+  safeWriteJsonAtomic(path, JSON.stringify(config, null, 2), { mode: MCP_FILE_MODE });
+  return { written: true, errors: [] };
+}
+var SECRET_FIELD_NAME_RE = /TOKEN|KEY|SECRET|BEARER|PASSWORD/i;
+function collectSecretFields(config) {
+  const out = /* @__PURE__ */ new Map();
+  if (typeof config !== "object" || config === null)
+    return out;
+  const servers = config.mcpServers;
+  if (typeof servers !== "object" || servers === null)
+    return out;
+  for (const [server, raw] of Object.entries(servers)) {
+    if (typeof raw !== "object" || raw === null)
+      continue;
+    const entry = raw;
+    for (const [block, location] of [
+      [entry.env, "env"],
+      [entry.headers, "header"]
+    ]) {
+      if (!block)
+        continue;
+      for (const [field, value] of Object.entries(block)) {
+        if (typeof value !== "string")
+          continue;
+        if (!SECRET_FIELD_NAME_RE.test(field))
+          continue;
+        out.set(`${server}\0${field}`, { location, value });
+      }
+    }
+  }
+  return out;
+}
+function mcpMirrorParityErrors(provision2, project) {
+  const a = collectSecretFields(provision2);
+  const b = collectSecretFields(project);
+  const mismatches = [];
+  const keys = /* @__PURE__ */ new Set([...a.keys(), ...b.keys()]);
+  for (const key of keys) {
+    const [server, field] = key.split("\0");
+    const pv = a.get(key);
+    const pj = b.get(key);
+    if (pv && !pj) {
+      mismatches.push({ server, field, location: pv.location, reason: "missing-in-project" });
+    } else if (!pv && pj) {
+      mismatches.push({ server, field, location: pj.location, reason: "missing-in-provision" });
+    } else if (pv && pj && pv.value !== pj.value) {
+      mismatches.push({ server, field, location: pv.location, reason: "value-diverges" });
+    }
+  }
+  return mismatches;
+}
+function formatMirrorMismatch(m) {
+  return `[mcp-mirror] [parity-violation] server=${m.server} field=${m.field} location=${m.location} reason=${m.reason}`;
+}
+
 // ../../packages/core/dist/provisioning/frameworks/claudecode/identity.js
 function buildMemorySection(hasQmd) {
   const recall = hasQmd ? `### Recall
@@ -3464,157 +3670,11 @@ ${frontmatter.environment === "prod" ? "- Production environment: exercise extra
 }
 
 // ../../packages/core/dist/provisioning/frameworks/claudecode/index.js
-import { readFileSync as readFileSync5, writeFileSync as writeFileSync5, mkdirSync as mkdirSync4, existsSync as existsSync5, chmodSync as chmodSync4, readdirSync, rmSync, copyFileSync } from "fs";
+import { readFileSync as readFileSync5, writeFileSync as writeFileSync5, mkdirSync as mkdirSync4, existsSync as existsSync5, chmodSync as chmodSync5, readdirSync, rmSync, copyFileSync } from "fs";
 import { join as join4, relative, dirname as dirname4 } from "path";
 import { homedir as homedir3 } from "os";
 import { execFile as execFile3 } from "child_process";
 
-// ../../packages/core/dist/provisioning/mcp-config-guards.js
-import { existsSync as existsSync4, readFileSync as readFileSync4, renameSync as renameSync3, writeFileSync as writeFileSync4, unlinkSync as unlinkSync3 } from "fs";
-var REQUIRED_ENV_RULES_BY_SERVER = {
-  "cloud-broker": [
-    { key: "AGT_HOST", mustBeConcrete: false },
-    { key: "AGT_API_KEY", mustBeConcrete: false },
-    // ENG-4744: this is the bug shape — writer used to omit this
-    // entirely, or render it as a literal `${AGT_AGENT_ID}` instead
-    // of the agent's real UUID. The broker has no way to substitute
-    // it post-spawn, so a placeholder here = silently broken agent.
-    { key: "AGT_AGENT_ID", mustBeConcrete: true }
-  ]
-};
-var PLACEHOLDER_RE = /\$\{[^}]+\}/;
-function validateRenderedMcpConfig(config) {
-  const errors = [];
-  if (typeof config !== "object" || config === null || Array.isArray(config)) {
-    return {
-      ok: false,
-      errors: [
-        {
-          kind: "invalid_json_shape",
-          server: "*",
-          message: "config root must be a non-null object"
-        }
-      ]
-    };
-  }
-  const root = config;
-  if (root.mcpServers === void 0) {
-    return { ok: true };
-  }
-  if (typeof root.mcpServers !== "object" || root.mcpServers === null) {
-    return {
-      ok: false,
-      errors: [
-        {
-          kind: "invalid_json_shape",
-          server: "*",
-          message: "mcpServers must be an object"
-        }
-      ]
-    };
-  }
-  if (Array.isArray(root.mcpServers)) {
-    return {
-      ok: false,
-      errors: [
-        {
-          kind: "invalid_json_shape",
-          server: "*",
-          message: "mcpServers must be an object"
-        }
-      ]
-    };
-  }
-  for (const [serverKey, raw] of Object.entries(root.mcpServers)) {
-    if (typeof raw !== "object" || raw === null || Array.isArray(raw)) {
-      errors.push({
-        kind: "invalid_json_shape",
-        server: serverKey,
-        message: `entry must be an object`
-      });
-      continue;
-    }
-    const entry = raw;
-    const entryRecord = entry;
-    if (typeof entryRecord["url"] === "string") {
-      const type = entryRecord["type"];
-      if (type !== "http" && type !== "sse") {
-        errors.push({
-          kind: "remote_mcp_missing_type",
-          server: serverKey,
-          message: `url-based entry must include \`type: "http"\` or \`type: "sse"\` (Claude Code MCP schema requires it)`
-        });
-      }
-    }
-    const rules = REQUIRED_ENV_RULES_BY_SERVER[serverKey];
-    if (rules) {
-      const env = entry.env ?? {};
-      for (const rule of rules) {
-        const value = env[rule.key];
-        if (typeof value !== "string" || value.length === 0) {
-          errors.push({
-            kind: "missing_required_env",
-            server: serverKey,
-            message: `missing required env key: ${rule.key}`
-          });
-          continue;
-        }
-        if (rule.mustBeConcrete && PLACEHOLDER_RE.test(value)) {
-          errors.push({
-            kind: "unexpanded_placeholder",
-            server: serverKey,
-            message: `env.${rule.key} contains an unexpanded \${...} placeholder; expected a concrete value`
-          });
-        }
-      }
-    }
-  }
-  return errors.length === 0 ? { ok: true } : { ok: false, errors };
-}
-function formatValidationErrors(errors) {
-  return errors.map((e) => `${e.server}:${e.kind}=${e.message}`).join("; ");
-}
-function safeWriteJsonAtomic(path, content, opts = {}) {
-  const keepBackup = opts.keepBackup !== false;
-  const rename = opts.renamer ?? renameSync3;
-  const tmpPath = `${path}.new`;
-  const bakPath = `${path}.bak`;
-  let movedOriginalToBackup = false;
-  try {
-    writeFileSync4(tmpPath, content);
-  } catch (err) {
-    throw err;
-  }
-  try {
-    if (keepBackup && existsSync4(path)) {
-      rename(path, bakPath);
-      movedOriginalToBackup = true;
-    }
-    rename(tmpPath, path);
-  } catch (err) {
-    try {
-      if (existsSync4(tmpPath))
-        unlinkSync3(tmpPath);
-    } catch {
-    }
-    if (movedOriginalToBackup && !existsSync4(path) && existsSync4(bakPath)) {
-      try {
-        renameSync3(bakPath, path);
-      } catch {
-      }
-    }
-    throw err;
-  }
-}
-function safeWriteMcpJson(path, config) {
-  const validation = validateRenderedMcpConfig(config);
-  if (!validation.ok) {
-    return { written: false, errors: validation.errors };
-  }
-  safeWriteJsonAtomic(path, JSON.stringify(config, null, 2));
-  return { written: true, errors: [] };
-}
-
 // ../../packages/core/dist/provisioning/remote-mcp.js
 function envVarForToken(definitionId) {
   return `${definitionId.replace(/-/g, "_").toUpperCase()}_ACCESS_TOKEN`;
@@ -3794,7 +3854,19 @@ function syncMcpToProject(codeName) {
   try {
     const content = readFileSync5(provisionMcpPath, "utf-8");
     mkdirSync4(projectDir, { recursive: true });
-    writeFileSync5(projectMcpPath, content);
+    writeFileSync5(projectMcpPath, content, { mode: MCP_FILE_MODE });
+    try {
+      chmodSync5(projectMcpPath, MCP_FILE_MODE);
+    } catch {
+    }
+    try {
+      const mismatches = mcpMirrorParityErrors(JSON.parse(content), JSON.parse(readFileSync5(projectMcpPath, "utf-8")));
+      for (const m of mismatches) {
+        process.stderr.write(`${formatMirrorMismatch(m)} agent=${codeName}
+`);
+      }
+    } catch {
+    }
   } catch {
   }
   renderChannelMessageHandlerForAgent(codeName);
@@ -3904,7 +3976,15 @@ function deployArtifactsToProject(codeName, provisionDir) {
           continue;
         }
       }
-      writeFileSync5(dest, srcContent);
+      if (file === ".mcp.json") {
+        writeFileSync5(dest, srcContent, { mode: MCP_FILE_MODE });
+        try {
+          chmodSync5(dest, MCP_FILE_MODE);
+        } catch {
+        }
+      } else {
+        writeFileSync5(dest, srcContent);
+      }
     } catch {
     }
   }
@@ -4012,7 +4092,7 @@ function deployArtifactsToProject(codeName, provisionDir) {
       const upToDate = existsSync5(hookDest) && readFileSync5(hookDest, "utf-8") === srcContent;
       if (!upToDate)
         writeFileSync5(hookDest, srcContent);
-      chmodSync4(hookDest, 493);
+      chmodSync5(hookDest, 493);
     }
   } catch {
   }
@@ -4612,7 +4692,7 @@ Your \`tools:\` allowlist (above) names every MCP server the parent has connecte
 
 ## Hard rules \u2014 Credential Access Control
 
-1. **Never** read raw secrets out of \`.mcp.json\`, \`~/.augmented/*/provision/.mcp.json\`, or any agent config file. Those files contain bot tokens, API keys, and OAuth credentials. The Credential Access Control guardrail (\`block_read: true\` on secrets) treats reads of those values as a violation regardless of intent.
+1. **Never** read raw secrets out of \`.mcp.json\`, \`~/.augmented/*/provision/.mcp.json\`, \`.env.integrations\`, or any agent config file. Those files contain bot tokens, API keys, and OAuth credentials. The Credential Access Control guardrail (\`block_read: true\` on secrets) treats reads of those values as a violation regardless of intent. As **defence-in-depth (not structural enforcement)**, the plugin's \`settings.json\` also denies \`Bash(cat:*/.mcp.json)\`, \`Bash(cat:*/.env.integrations)\`, and \`Bash(jq:*/.mcp.json)\` (ENG-5901 / ADR-0018) \u2014 these block the obvious copy-paste paths but a determined in-process reader can still reach the values; the durable fix is Phase 2/3 of ADR-0018.
 2. **Never** post Slack messages via raw \`chat.postMessage\` + a bot token lifted from config. Use the channel MCP's reply tool (\`mcp__slack-channel__slack_reply\`, \`mcp__telegram-channel__telegram_reply\`, \`mcp__direct-chat__direct_chat_reply\`, etc.) so the call goes through the audited path.
 3. If an \`mcp__*\` tool you expect to be available returns "No such tool available.", **stop and surface the gap to the parent** in your summary rather than working around it. A missing MCP binding is a platform bug worth fixing \u2014 it's the exact failure shape this sub-agent was added to prevent (see ENG-5897 / ENG-5905).
 4. When verifying a capability is wired, confirm the relevant env var exists **without printing its value** \u2014 use \`[ -n "$POSTIZ_API_KEY" ] && echo present || echo absent\`, never \`echo $POSTIZ_API_KEY\`. The Credential Access Control guardrail covers tool-call output as well as file reads.
@@ -5027,7 +5107,7 @@ ${sections}`
     if (envLines.length > 1) {
       const envPath = join4(agentDir, ".env");
       writeFileSync5(envPath, envLines.join("\n") + "\n");
-      chmodSync4(envPath, SECRET_FILE_MODE);
+      chmodSync5(envPath, SECRET_FILE_MODE);
     }
   },
   // Claude Code has no gateway process — methods intentionally omitted
@@ -5561,7 +5641,7 @@ ${sections}`
     if (envLines.length > 1) {
       const envPath = join4(agentDir, ".env.integrations");
       writeFileSync5(envPath, envLines.join("\n") + "\n");
-      chmodSync4(envPath, SECRET_FILE_MODE);
+      chmodSync5(envPath, SECRET_FILE_MODE);
     }
     writeXurlStoreForIntegrations(decryptedIntegrations);
     for (const integration of decryptedIntegrations) {
@@ -5760,14 +5840,14 @@ ${sections}`
         mkdirSync4(join4(filePath, ".."), { recursive: true });
         if (isPluginManaged && existsSync5(filePath)) {
           try {
-            chmodSync4(filePath, READ_WRITE_MODE);
+            chmodSync5(filePath, READ_WRITE_MODE);
           } catch {
           }
         }
         writeFileSync5(filePath, file.content);
         if (isPluginManaged) {
           try {
-            chmodSync4(filePath, READ_ONLY_MODE);
+            chmodSync5(filePath, READ_ONLY_MODE);
           } catch {
           }
         }
@@ -5948,7 +6028,7 @@ ${sections}`
       return;
     const tokenPath = join4(agentDir, ".tokens.json");
     writeFileSync5(tokenPath, JSON.stringify(tokens, null, 2));
-    chmodSync4(tokenPath, SECRET_FILE_MODE);
+    chmodSync5(tokenPath, SECRET_FILE_MODE);
   }
 };
 registerFramework(claudeCodeAdapter);
@@ -6526,7 +6606,7 @@ import { homedir as homedir6, userInfo } from "os";
 import { spawn as spawn3 } from "child_process";
 
 // src/lib/watchdog.ts
-import { readFileSync as readFileSync7, writeFileSync as writeFileSync7, unlinkSync as unlinkSync4, existsSync as existsSync7, mkdirSync as mkdirSync6, openSync, closeSync, chmodSync as chmodSync5 } from "fs";
+import { readFileSync as readFileSync7, writeFileSync as writeFileSync7, unlinkSync as unlinkSync4, existsSync as existsSync7, mkdirSync as mkdirSync6, openSync, closeSync, chmodSync as chmodSync6 } from "fs";
 import { join as join7 } from "path";
 import { spawn as spawn2, execFileSync } from "child_process";
 var DEFAULT_CONFIG_DIR = join7(process.env["HOME"] ?? "/tmp", ".augmented");
@@ -6620,7 +6700,7 @@ function startWatchdog(opts) {
     const { logFile } = getManagerPaths(configDir);
     const logFd = openSync(logFile, "a", 384);
     try {
-      chmodSync5(logFile, 384);
+      chmodSync6(logFile, 384);
     } catch {
     }
     const intervalSec = String(Math.max(Math.floor(opts.intervalMs / 1e3), 5));
@@ -7133,6 +7213,7 @@ async function managerUninstallSystemUnitCommand() {
 export {
   getIntegration,
   extractCommandNotFound,
+  safeWriteJsonAtomic,
   INTEGRATIONS_SECTION_START,
   INTEGRATIONS_SECTION_END,
   estimateActiveTasksTokens,
@@ -7169,4 +7250,4 @@ export {
   managerInstallSystemUnitCommand,
   managerUninstallSystemUnitCommand
 };
-//# sourceMappingURL=chunk-TIS3QVYS.js.map
+//# sourceMappingURL=chunk-GBUPVHIR.js.map