@integrity-labs/agt-cli 0.27.7-test.6 → 0.27.8-test.10

package/dist/bin/agt.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   ApiError,
-  DEFAULT_AGT_HOST,
+  PROD_AGT_HOST,
   api,
   error,
   exchangeApiKey,
@@ -27,7 +27,7 @@ import {
   success,
   table,
   warn
-} from "../chunk-AACMX6LE.js";
+} from "../chunk-2E5OABKX.js";
 import {
   CHANNEL_REGISTRY,
   DEPLOYMENT_TEMPLATES,
@@ -53,7 +53,7 @@ import {
   renderTemplate,
   resolveChannels,
   serializeManifestForSlackCli
-} from "../chunk-YSBGIXJG.js";
+} from "../chunk-6HFXSNNY.js";
 
 // src/bin/agt.ts
 import { join as join15 } from "path";
@@ -1557,8 +1557,9 @@ async function provisionCommand(codeName, options) {
 import chalk10 from "chalk";
 import ora10 from "ora";
 import { spawn } from "child_process";
-import { readFileSync as readFileSync5, writeFileSync as writeFileSync7 } from "fs";
-import { join as join10 } from "path";
+import { existsSync as existsSync6, readFileSync as readFileSync5, writeFileSync as writeFileSync7 } from "fs";
+import { delimiter, dirname as dirname3, join as join10 } from "path";
+import { fileURLToPath as fileURLToPath2 } from "url";
 
 // src/lib/impersonate-flag.ts
 var ENV_VAR = "AGT_IMPERSONATE_ENABLED";
@@ -1996,12 +1997,73 @@ function buildIntroduction(input4) {
   const lines = [`I'm ${spokenName}${codeSuffix}${roleClause}.`, ""];
   if (integrations.length > 0) {
     lines.push(`Connected integrations: ${integrations.join(", ")}.`);
+    lines.push("");
+    lines.push(
+      "If the operator asks what you can do, call each MCP server's `tools/list` and report the actual tool inventory. Do not narrate capabilities from CHARTER.md \u2014 it describes intent, not runtime state. Tools that fail to enumerate (server failed to spawn, env missing, etc.) should be reported as such, not silently omitted."
+    );
   } else {
     lines.push("No integrations are connected.");
   }
   return lines.join("\n");
 }
 
+// src/lib/impersonate-mcp-rewrite.ts
+var SERVER_HOME_MCP_PATH_RE = /^\/home\/[^/]+\/\.augmented\/_mcp\/([^/]+)$/;
+function rewriteMcpJsonForImpersonation(mcpJson, ctx) {
+  const parsed = JSON.parse(mcpJson);
+  if (!isPlainObject(parsed)) {
+    throw new Error(
+      `rewriteMcpJsonForImpersonation: expected an object at the JSON root, got ${typeof parsed}`
+    );
+  }
+  const servers = parsed["mcpServers"];
+  if (!isPlainObject(servers)) {
+    throw new Error(
+      "rewriteMcpJsonForImpersonation: expected an object-typed `mcpServers` field"
+    );
+  }
+  const rewrittenServers = {};
+  for (const [serverName, raw] of Object.entries(servers)) {
+    rewrittenServers[serverName] = rewriteServerEntry(raw, ctx);
+  }
+  const out = { ...parsed, mcpServers: rewrittenServers };
+  return JSON.stringify(out, null, 2);
+}
+function rewriteServerEntry(raw, ctx) {
+  if (!isPlainObject(raw)) return raw;
+  let args = raw["args"];
+  if (Array.isArray(args)) {
+    args = args.map((arg) => {
+      if (typeof arg !== "string") return arg;
+      const m = SERVER_HOME_MCP_PATH_RE.exec(arg);
+      if (!m) return arg;
+      return `${ctx.cliMcpBundleDir}/${m[1]}`;
+    });
+  }
+  const env = isPlainObject(raw["env"]) ? { ...raw["env"] } : {};
+  fillIfEmpty(env, "AGT_HOST", ctx.apiHost);
+  fillIfEmpty(env, "AGT_API_KEY", ctx.impersonationToken);
+  fillIfEmpty(env, "HOME", ctx.operatorHome);
+  fillIfEmpty(env, "AGT_AGENT_ID", ctx.agentId);
+  fillIfEmpty(env, "AGT_AGENT_CODE_NAME", ctx.agentCodeName);
+  if ("PATH" in env) {
+    env["PATH"] = ctx.operatorPath;
+  }
+  if (env["AGT_RUN_ID"] === "${AGT_RUN_ID}") {
+    delete env["AGT_RUN_ID"];
+  }
+  return { ...raw, args, env };
+}
+function fillIfEmpty(env, key, value) {
+  const current = env[key];
+  if (typeof current !== "string" || current.length === 0) {
+    env[key] = value;
+  }
+}
+function isPlainObject(v) {
+  return typeof v === "object" && v !== null && !Array.isArray(v);
+}
+
 // src/commands/impersonate.ts
 var SWAP_FILES = ["CLAUDE.md", ".mcp.json"];
 var AGENT_IMPERSONATION_HEADER = "X-Agent-Impersonation";
@@ -2041,7 +2103,7 @@ async function impersonateConnectCommand(token, options = {}) {
     isSilent: json
   });
   spinner.start();
-  const host2 = (options.apiHost ?? DEFAULT_AGT_HOST).replace(/\/+$/, "");
+  const host2 = (options.apiHost ?? PROD_AGT_HOST).replace(/\/+$/, "");
   let bundle;
   try {
     const res = await fetch(`${host2}/impersonate/agent/redeem`, {
@@ -2071,7 +2133,15 @@ async function impersonateConnectCommand(token, options = {}) {
   );
   writeFileSync7(
     join10(personaDir, ".mcp.json"),
-    bundle.artifacts[".mcp.json"]
+    rewriteMcpJsonForImpersonation(bundle.artifacts[".mcp.json"], {
+      operatorHome: process.env.HOME ?? "",
+      operatorPath: resolveOperatorPath(),
+      cliMcpBundleDir: resolveCliMcpBundleDir(),
+      impersonationToken: bundle.token,
+      apiHost: host2,
+      agentId: bundle.agent.agent_id,
+      agentCodeName: bundle.agent.code_name
+    })
   );
   spinner.text = "Swapping persona files\u2026";
   const projectCwd = options.workdir ? ensureImpersonateWorkdir(bundle.agent.code_name) : process.cwd();
@@ -2353,6 +2423,26 @@ function readMcpIntegrations(path) {
     return [];
   }
 }
+function resolveCliMcpBundleDir() {
+  const moduleDir = dirname3(fileURLToPath2(import.meta.url));
+  const candidates = [
+    join10(moduleDir, "mcp"),
+    join10(moduleDir, "..", "mcp"),
+    join10(moduleDir, "..", "..", "mcp")
+  ];
+  for (const candidate of candidates) {
+    if (existsSync6(join10(candidate, "index.js"))) return candidate;
+  }
+  return candidates[candidates.length - 1];
+}
+function resolveOperatorPath(execPath = process.execPath, inheritedPath = process.env.PATH ?? "") {
+  const nodeBinDir = dirname3(execPath);
+  const segments = inheritedPath.split(delimiter).filter((s) => s.length > 0);
+  if (!segments.includes(nodeBinDir)) {
+    segments.unshift(nodeBinDir);
+  }
+  return segments.join(delimiter);
+}
 function buildImpersonateClaudeLaunch(projectCwd, inheritEnv = process.env, agentId = null) {
   const env = {
     ...inheritEnv,
@@ -3012,7 +3102,7 @@ function terminate(child) {
 // src/commands/manager-watch.tsx
 import { useEffect, useState, useMemo } from "react";
 import { render, Box, Text, useApp, useInput } from "ink";
-import { existsSync as existsSync6, readFileSync as readFileSync6, statSync, openSync, readSync, closeSync } from "fs";
+import { existsSync as existsSync7, readFileSync as readFileSync6, statSync, openSync, readSync, closeSync } from "fs";
 import { homedir as homedir4 } from "os";
 import { join as join12 } from "path";
 import { jsx, jsxs } from "react/jsx-runtime";
@@ -3044,7 +3134,7 @@ function managerWatchCommand(opts = {}) {
 }
 function readState(stateFile) {
   try {
-    if (!existsSync6(stateFile)) return null;
+    if (!existsSync7(stateFile)) return null;
     const raw = readFileSync6(stateFile, "utf-8");
     return JSON.parse(raw);
   } catch {
@@ -3052,7 +3142,7 @@ function readState(stateFile) {
   }
 }
 function tailLogFile(logFile, lines) {
-  if (!existsSync6(logFile)) return [];
+  if (!existsSync7(logFile)) return [];
   try {
     const fileSize = statSync(logFile).size;
     if (fileSize === 0) return [];
@@ -3293,7 +3383,7 @@ function truncate(s, max) {
   return s.length > max ? `${s.slice(0, Math.max(0, max - 1))}\u2026` : s;
 }
 function streamLogFile(logFile) {
-  if (!existsSync6(logFile)) {
+  if (!existsSync7(logFile)) {
     process.stderr.write(`No manager log found at ${logFile}.
 Start the manager first: agt manager start
 `);
@@ -3339,14 +3429,14 @@ Start the manager first: agt manager start
 // src/commands/agent.ts
 import chalk14 from "chalk";
 import JSON52 from "json5";
-import { readFileSync as readFileSync7, existsSync as existsSync7 } from "fs";
+import { readFileSync as readFileSync7, existsSync as existsSync8 } from "fs";
 import { join as join13 } from "path";
 async function agentShowCommand(codeName, opts) {
   const json = isJsonMode();
   const unifiedDir = join13(opts.configDir, codeName, "provision");
   const legacyDir = join13(opts.configDir, codeName, "claudecode", "provision");
-  const agentDir = existsSync7(unifiedDir) ? unifiedDir : legacyDir;
-  const hasLocalConfig = existsSync7(agentDir);
+  const agentDir = existsSync8(unifiedDir) ? unifiedDir : legacyDir;
+  const hasLocalConfig = existsSync8(agentDir);
   let apiChannels = null;
   let apiAgent = null;
   if (getApiKey()) {
@@ -3380,7 +3470,7 @@ async function agentShowCommand(codeName, opts) {
   let agentState = null;
   if (hasLocalConfig) {
     const charterPath = join13(agentDir, "CHARTER.md");
-    if (existsSync7(charterPath)) {
+    if (existsSync8(charterPath)) {
       const raw = readFileSync7(charterPath, "utf-8");
       const parsed = extractFrontmatter(raw);
       if (parsed.frontmatter) {
@@ -3388,7 +3478,7 @@ async function agentShowCommand(codeName, opts) {
       }
     }
     const toolsPath = join13(agentDir, "TOOLS.md");
-    if (existsSync7(toolsPath)) {
+    if (existsSync8(toolsPath)) {
       const raw = readFileSync7(toolsPath, "utf-8");
       const parsed = extractFrontmatter(raw);
       if (parsed.frontmatter) {
@@ -3396,7 +3486,7 @@ async function agentShowCommand(codeName, opts) {
       }
     }
     const openclawPath = join13(agentDir, "openclaw.json5");
-    if (existsSync7(openclawPath)) {
+    if (existsSync8(openclawPath)) {
       try {
         const raw = readFileSync7(openclawPath, "utf-8");
         openclawConfig = JSON52.parse(raw);
@@ -3404,7 +3494,7 @@ async function agentShowCommand(codeName, opts) {
       }
     }
     const statePath = join13(opts.configDir, "manager-state.json");
-    if (existsSync7(statePath)) {
+    if (existsSync8(statePath)) {
       try {
         const raw = readFileSync7(statePath, "utf-8");
         const state = JSON.parse(raw);
@@ -3743,8 +3833,8 @@ async function kanbanRecurringDisableCommand(titleOrId, opts) {
 }
 
 // src/commands/setup.ts
-import { existsSync as existsSync8, readFileSync as readFileSync8, writeFileSync as writeFileSync8, mkdirSync as mkdirSync7, accessSync, constants as fsConstants } from "fs";
-import { join as join14, dirname as dirname3 } from "path";
+import { existsSync as existsSync9, readFileSync as readFileSync8, writeFileSync as writeFileSync8, mkdirSync as mkdirSync7, accessSync, constants as fsConstants } from "fs";
+import { join as join14, dirname as dirname4 } from "path";
 import { homedir as homedir5 } from "os";
 import chalk16 from "chalk";
 import ora14 from "ora";
@@ -3759,7 +3849,7 @@ function detectShellProfile() {
     return fishConfig;
   }
   const bashrc = join14(home, ".bashrc");
-  if (existsSync8(bashrc)) return bashrc;
+  if (existsSync9(bashrc)) return bashrc;
   return join14(home, ".bash_profile");
 }
 function maybeWriteSystemWideEnv(apiUrl, apiKey, consoleUrl) {
@@ -3786,7 +3876,7 @@ function quoteForFishShell(value) {
 }
 function writeEtcEnvironment(apiUrl, apiKey, consoleUrl) {
   const envPath = "/etc/environment";
-  if (!existsSync8(envPath)) return false;
+  if (!existsSync9(envPath)) return false;
   try {
     accessSync(envPath, fsConstants.W_OK);
   } catch {
@@ -3812,7 +3902,7 @@ function writeEtcEnvironment(apiUrl, apiKey, consoleUrl) {
 }
 function writeProfileDScript(apiUrl, apiKey, consoleUrl) {
   const profileD = "/etc/profile.d";
-  if (!existsSync8(profileD)) return false;
+  if (!existsSync9(profileD)) return false;
   try {
     accessSync(profileD, fsConstants.W_OK);
   } catch {
@@ -3835,7 +3925,7 @@ function writeProfileDScript(apiUrl, apiKey, consoleUrl) {
 }
 function ensureBashrcSourcesProfileD() {
   const bashrc = "/etc/bashrc";
-  if (!existsSync8(bashrc)) return false;
+  if (!existsSync9(bashrc)) return false;
   try {
     accessSync(bashrc, fsConstants.W_OK);
   } catch {
@@ -3881,7 +3971,7 @@ function buildExportLines(shell, apiUrl, apiKey, consoleUrl) {
   lines.push("");
   return lines.join("\n");
 }
-async function setupCommand(token) {
+async function setupCommand(token, options = {}) {
   const json = isJsonMode();
   const shortTokenPattern = /^[A-HJ-NP-Z2-9]{4}-[A-HJ-NP-Z2-9]{4}$/i;
   const legacyTokenPattern = /^prov_[a-f0-9]{64}$/i;
@@ -3896,11 +3986,24 @@ async function setupCommand(token) {
     return;
   }
   const normalizedToken = shortTokenPattern.test(token) ? token.toUpperCase() : token.toLowerCase();
-  let apiUrl = process.env["AGT_HOST"];
+  const apiHostFlag = options.apiHost?.trim();
+  const envHost = process.env["AGT_HOST"]?.trim();
+  const apiUrl = apiHostFlag || envHost;
   if (!apiUrl) {
-    apiUrl = "https://api.augmented.team";
-    if (!json) {
-      info(`No AGT_HOST set \u2014 using default: ${chalk16.bold(apiUrl)}`);
+    const msg = "Cannot determine API host for token exchange. Pass --api-host <url> or set AGT_HOST before running `agt setup`.\n  Production:        --api-host https://api.augmented.team\n  Non-prod stage:    --api-host https://<stage>.api.staging.augmented.team\n  Local development: --api-host http://api.agt.localhost:1355";
+    if (json) {
+      jsonOutput({ ok: false, error: msg });
+    } else {
+      error(msg);
+    }
+    process.exitCode = 1;
+    return;
+  }
+  if (!json) {
+    if (apiHostFlag) {
+      info(`Exchanging token against ${chalk16.bold(apiUrl)} (from --api-host)`);
+    } else {
+      info(`Exchanging token against ${chalk16.bold(apiUrl)} (from AGT_HOST)`);
     }
   }
   const spinner = ora14({ text: "Exchanging provisioning token\u2026", isSilent: json });
@@ -3968,12 +4071,12 @@ async function setupCommand(token) {
     );
   }
   const exportLines = buildExportLines(shell, finalApiUrl, setupResult.api_key, consoleUrl);
-  const profileDir = dirname3(profilePath);
-  if (!existsSync8(profileDir)) {
+  const profileDir = dirname4(profilePath);
+  if (!existsSync9(profileDir)) {
     mkdirSync7(profileDir, { recursive: true });
   }
   const marker = "# Augmented (agt) host configuration";
-  const current = existsSync8(profilePath) ? readFileSync8(profilePath, "utf-8") : "";
+  const current = existsSync9(profilePath) ? readFileSync8(profilePath, "utf-8") : "";
   let updated;
   if (current.includes(marker)) {
     updated = current.replace(
@@ -4552,10 +4655,10 @@ async function acpxCloseCommand(agent2, _opts, cmd) {
 
 // src/commands/update.ts
 import { execFileSync, execSync } from "child_process";
-import { existsSync as existsSync9, realpathSync as realpathSync2 } from "fs";
+import { existsSync as existsSync10, realpathSync as realpathSync2 } from "fs";
 import chalk18 from "chalk";
 import ora16 from "ora";
-var cliVersion = true ? "0.27.7-test.6" : "dev";
+var cliVersion = true ? "0.27.8-test.10" : "dev";
 async function fetchLatestVersion() {
   const host2 = getHost();
   if (!host2) return null;
@@ -4659,7 +4762,7 @@ function performUpdate(version) {
 function detectBrewOwner() {
   for (const prefix of ["/home/linuxbrew/.linuxbrew", "/opt/homebrew", "/usr/local"]) {
     const cellar = `${prefix}/Cellar`;
-    if (!existsSync9(cellar)) continue;
+    if (!existsSync10(cellar)) continue;
     try {
       return execSync(`stat -c %U "${cellar}" 2>/dev/null || stat -f %Su "${cellar}"`, { encoding: "utf-8" }).trim() || null;
     } catch {
@@ -5087,7 +5190,7 @@ function handleError(err) {
 }
 
 // src/bin/agt.ts
-var cliVersion2 = true ? "0.27.7-test.6" : "dev";
+var cliVersion2 = true ? "0.27.8-test.10" : "dev";
 var program = new Command();
 program.name("agt").description("Augmented CLI \u2014 agent provisioning and management").version(cliVersion2).option("--json", "Emit machine-readable JSON output (suppress spinners and colors)").option("--skip-update-check", "Skip the automatic update check on startup");
 program.hook("preAction", (thisCommand) => {
@@ -5097,7 +5200,13 @@ program.hook("preAction", (thisCommand) => {
   }
 });
 program.command("whoami").description("Show the authenticated host, team, and user from AGT_API_KEY").action(whoamiCommand);
-program.command("setup <token>").description("One-command host setup: exchange provisioning token, configure env vars, verify, and start manager").action(setupCommand);
+program.command("setup <token>").description("One-command host setup: exchange provisioning token, configure env vars, verify, and start manager").option(
+  "--api-host <url>",
+  // ENG-5831: required when AGT_HOST is not set in the shell — the setup
+  // command no longer silently defaults to prod. Mirrors `agt impersonate
+  // connect --api-host` (ENG-5773).
+  "API host to exchange the provisioning token against. Takes precedence over AGT_HOST. Required when AGT_HOST is unset (e.g. https://test.api.staging.augmented.team for the test stage; https://api.augmented.team for prod)."
+).action(setupCommand);
 var team = program.command("team").description("Manage teams");
 team.command("list").description("List teams you belong to").action(teamListCommand);
 team.command("create <name>").description("Create a new team and set it as active").action(teamCreateCommand);