@integrity-labs/agt-cli 0.28.336 → 0.28.338

package/dist/{chunk-J2WYEOBH.js → chunk-O4V3TMUI.js}

@@ -10011,6 +10011,7 @@ export {
   normalizeFlagValue,
   coerceEnvValue,
   FLAGS_SCHEMA_VERSION,
+  LATE_BOUND_VARS,
   expandTemplateVars,
   parseEnvIntegrations,
   sessionTranscriptDir,
@@ -10061,4 +10062,4 @@ export {
   stopAllSessionsAndWait,
   getProjectDir
 };
-//# sourceMappingURL=chunk-J2WYEOBH.js.map
+//# sourceMappingURL=chunk-O4V3TMUI.js.map

package/dist/{chunk-VIYSMPXD.js → chunk-S2JJ532Q.js}

@@ -1,5 +1,6 @@
 import {
   INTEGRATION_REGISTRY,
+  LATE_BOUND_VARS,
   OAUTH_PROVIDERS,
   coerceEnvValue,
   expandTemplateVars,
@@ -19,7 +20,7 @@ import {
   resolveConnectivityProbe,
   worseConnectivityOutcome,
   wrapScheduledTaskPrompt
-} from "./chunk-J2WYEOBH.js";
+} from "./chunk-O4V3TMUI.js";
 import {
   parsePsRows
 } from "./chunk-XWVM4KPK.js";
@@ -7042,7 +7043,7 @@ function requireHost() {
 }
 
 // src/lib/api-client.ts
-var agtCliVersion = true ? "0.28.336" : "dev";
+var agtCliVersion = true ? "0.28.338" : "dev";
 var lastConfigHash = null;
 function setConfigHash(hash) {
   lastConfigHash = hash && hash.length > 0 ? hash : null;
@@ -8309,11 +8310,21 @@ function readMcpStdioServerConfig(projectDir2, serverKey, env) {
     const sub = (value) => {
       if (!env) return value;
       const r = expandTemplateVars(value, env);
-      for (const name of r.unresolved) unresolved.add(name);
+      for (const name of r.unresolved) if (!LATE_BOUND_VARS.has(name)) unresolved.add(name);
       return r.value;
     };
     const resolvedEnv = {};
-    for (const [k, v] of Object.entries(entry.env ?? {})) resolvedEnv[k] = sub(v);
+    for (const [k, v] of Object.entries(entry.env ?? {})) {
+      if (!env) {
+        resolvedEnv[k] = v;
+        continue;
+      }
+      const r = expandTemplateVars(v, env);
+      const hardUnresolved = r.unresolved.filter((name) => !LATE_BOUND_VARS.has(name));
+      for (const name of hardUnresolved) unresolved.add(name);
+      if (hardUnresolved.length === 0 && r.unresolved.length > 0) continue;
+      resolvedEnv[k] = r.value;
+    }
     return {
       command: entry.command,
       args: (entry.args ?? []).map(sub),
@@ -8680,6 +8691,32 @@ function provision(input, frameworkId = "claude-code") {
   };
 }
 
+// src/lib/self-update-pin.ts
+function isValidPinVersion(v) {
+  return PIN_VERSION_RE.test(v);
+}
+var PIN_VERSION_RE = /^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-((?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\.(?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?$/;
+function isPinSet(raw) {
+  return typeof raw === "string" && raw.trim() !== "";
+}
+function normalizePinVersion(raw) {
+  if (!isPinSet(raw)) return null;
+  const v = raw.trim().replace(/^v/, "");
+  return isValidPinVersion(v) ? v : null;
+}
+function pinAllowsUrgent(raw) {
+  const v = (raw ?? "").trim().toLowerCase();
+  return v === "1" || v === "true" || v === "yes" || v === "on";
+}
+function decidePin(opts) {
+  const { installed, pinRaw } = opts;
+  if (!isPinSet(pinRaw)) return { kind: "unpinned" };
+  const pinned = normalizePinVersion(pinRaw);
+  if (!pinned) return { kind: "invalid", raw: pinRaw.trim() };
+  if (installed === pinned) return { kind: "satisfied", version: pinned };
+  return { kind: "install", version: pinned };
+}
+
 // src/commands/manager.ts
 import chalk3 from "chalk";
 import { existsSync as existsSync9, realpathSync } from "fs";
@@ -8895,6 +8932,11 @@ function table(headers, rows) {
 }
 
 // src/commands/manager.ts
+function normalizePinInEnv(env) {
+  const normalized = normalizePinVersion(env.AGT_CLI_PIN_VERSION);
+  if (normalized) env.AGT_CLI_PIN_VERSION = normalized;
+  else delete env.AGT_CLI_PIN_VERSION;
+}
 function managerStartCommand(opts) {
   const json = isJsonMode();
   if (!process.env.HOME || !process.env.HOME.trim()) {
@@ -9139,7 +9181,7 @@ function resolveStableAgtBin(rawPath) {
 }
 async function managerInstallCommand(opts = {}) {
   const json = isJsonMode();
-  const { installSupervisor, supervisorStatus } = await import("./manager-supervisor-RMC62QES.js");
+  const { installSupervisor, supervisorStatus } = await import("./manager-supervisor-P5G44DPX.js");
   const intervalSec = parseInt(opts.interval ?? "10", 10);
   if (isNaN(intervalSec) || intervalSec < 5) {
     const msg = "Interval must be at least 5 seconds.";
@@ -9179,10 +9221,11 @@ async function managerInstallCommand(opts = {}) {
   };
   const apiKey = getApiKey();
   if (apiKey) env.AGT_API_KEY = apiKey;
-  for (const k of ["AGT_TEAM", "AGT_CLI_RELEASE_CHANNEL", "PATH", "CLAUDE_PATH"]) {
+  for (const k of ["AGT_TEAM", "AGT_CLI_RELEASE_CHANNEL", "AGT_CLI_PIN_VERSION", "AGT_CLI_PIN_ALLOW_URGENT", "PATH", "CLAUDE_PATH"]) {
     const v = process.env[k];
     if (v != null) env[k] = v;
   }
+  normalizePinInEnv(env);
   const result = await installSupervisor({ agtBin, intervalSec, configDir, env });
   if (!result.ok) {
     if (json) jsonOutput({ ok: false, error: result.error });
@@ -9203,7 +9246,7 @@ async function managerInstallCommand(opts = {}) {
 }
 async function managerUninstallCommand() {
   const json = isJsonMode();
-  const { uninstallSupervisor } = await import("./manager-supervisor-RMC62QES.js");
+  const { uninstallSupervisor } = await import("./manager-supervisor-P5G44DPX.js");
   const result = await uninstallSupervisor();
   if (!result.ok) {
     if (json) jsonOutput({ ok: false, error: result.error });
@@ -9219,7 +9262,7 @@ async function managerUninstallCommand() {
 }
 async function managerInstallSystemUnitCommand(opts = {}) {
   const json = isJsonMode();
-  const { installSystemUnit, systemUnitStatus } = await import("./manager-supervisor-RMC62QES.js");
+  const { installSystemUnit, systemUnitStatus } = await import("./manager-supervisor-P5G44DPX.js");
   const intervalSec = parseInt(opts.interval ?? "10", 10);
   if (isNaN(intervalSec) || intervalSec < 5) {
     const msg = "Interval must be at least 5 seconds.";
@@ -9253,10 +9296,11 @@ async function managerInstallSystemUnitCommand(opts = {}) {
   };
   const apiKey = getApiKey();
   if (apiKey) env.AGT_API_KEY = apiKey;
-  for (const k of ["AGT_TEAM", "AGT_CLI_RELEASE_CHANNEL", "PATH", "CLAUDE_PATH"]) {
+  for (const k of ["AGT_TEAM", "AGT_CLI_RELEASE_CHANNEL", "AGT_CLI_PIN_VERSION", "AGT_CLI_PIN_ALLOW_URGENT", "PATH", "CLAUDE_PATH"]) {
     const v = process.env[k];
     if (v != null) env[k] = v;
   }
+  normalizePinInEnv(env);
   const result = await installSystemUnit({ agtBin, intervalSec, configDir, env, user });
   if (!result.ok) {
     if (json) jsonOutput({ ok: false, error: result.error });
@@ -9277,7 +9321,7 @@ async function managerInstallSystemUnitCommand(opts = {}) {
 }
 async function managerUninstallSystemUnitCommand() {
   const json = isJsonMode();
-  const { uninstallSystemUnit } = await import("./manager-supervisor-RMC62QES.js");
+  const { uninstallSystemUnit } = await import("./manager-supervisor-P5G44DPX.js");
   const result = await uninstallSystemUnit();
   if (!result.ok) {
     if (json) jsonOutput({ ok: false, error: result.error });
@@ -9428,6 +9472,10 @@ export {
   gatherSessionToolBindProbe,
   provision,
   executeConnectivityProbe,
+  isValidPinVersion,
+  normalizePinVersion,
+  pinAllowsUrgent,
+  decidePin,
   getManagerPaths,
   startWatchdog,
   managerStartCommand,
@@ -9439,4 +9487,4 @@ export {
   managerInstallSystemUnitCommand,
   managerUninstallSystemUnitCommand
 };
-//# sourceMappingURL=chunk-VIYSMPXD.js.map
+//# sourceMappingURL=chunk-S2JJ532Q.js.map