@integrity-labs/agt-cli 0.28.364 → 0.28.366

package/dist/bin/agt.js

@@ -40,7 +40,7 @@ import {
   success,
   table,
   warn
-} from "../chunk-KZZGAL4S.js";
+} from "../chunk-YUQIJ2KO.js";
 import {
   AnchorSessionClient,
   CHANNEL_REGISTRY,
@@ -70,7 +70,7 @@ import {
   renderTemplate,
   resolveChannels,
   serializeManifestForSlackCli
-} from "../chunk-JRML25UU.js";
+} from "../chunk-EFIXTBUQ.js";
 import "../chunk-XWVM4KPK.js";
 
 // src/bin/agt.ts
@@ -4829,7 +4829,7 @@ import { execFileSync, execSync } from "child_process";
 import { existsSync as existsSync10, realpathSync as realpathSync2 } from "fs";
 import chalk18 from "chalk";
 import ora16 from "ora";
-var cliVersion = true ? "0.28.364" : "dev";
+var cliVersion = true ? "0.28.366" : "dev";
 async function fetchLatestVersion() {
   const host2 = getHost();
   if (!host2) return null;
@@ -6001,7 +6001,7 @@ function handleError(err) {
 }
 
 // src/bin/agt.ts
-var cliVersion2 = true ? "0.28.364" : "dev";
+var cliVersion2 = true ? "0.28.366" : "dev";
 var program = new Command();
 program.name("agt").description("Augmented CLI \u2014 agent provisioning and management").version(cliVersion2).option("--json", "Emit machine-readable JSON output (suppress spinners and colors)").option("--skip-update-check", "Skip the automatic update check on startup");
 program.hook("preAction", async (thisCommand, actionCommand) => {

package/dist/{chunk-JRML25UU.js → chunk-EFIXTBUQ.js}

@@ -5198,6 +5198,25 @@ var INTEGRATION_REGISTRY = [
         { event_type: "proxy_mb", unit: "MB", label: "Proxy data" },
         { event_type: "session_minute", unit: "minute", label: "Session time" }
       ]
+    },
+    // ENG-7961: the broker returns a session `connect_url`; the AGENT drives the
+    // session with the `browse` CDP CLI over Bash (`browse open <url> --cdp
+    // <connect_url>`). So the host needs the `browse` binary. The manager's
+    // ensureToolkitCli installs it (npm) when a browserbase integration is
+    // present for the agent - and it is ALSO baked into the agt-runtime image
+    // (Docker-isolated agents don't get host installs mounted in), exactly like
+    // the `gh` precedent (ENG-7662).
+    //
+    // browse needs NO host credential: the agent drives the broker-provisioned
+    // session over `connect_url`, and the Browserbase account key stays
+    // server-side (never materialized to the agent). `env_key` is a required
+    // field but INERT here - auth_type 'none' means no token is ever published
+    // under it (the claudecode provisioner guards on `env_key && token`).
+    cli_tool: {
+      package: "browse",
+      binary: "browse",
+      env_key: "BROWSERBASE_UNUSED",
+      installer: "npm"
     }
   },
   {
@@ -9641,29 +9660,69 @@ function materializeEnvPlaceholders(raw, env2) {
   });
 }
 var MATERIALIZED_CONFIG_BASENAME = "opencode.jsonc";
-function writeMaterializedOpencodeConfig(codeName, projectDir2, serveEnv, log2) {
-  const target = join3(projectDir2, MATERIALIZED_CONFIG_BASENAME);
-  let raw;
+function opencodeGlobalConfigPath(serveEnv) {
+  const xdg = serveEnv["XDG_CONFIG_HOME"]?.trim();
+  const base = xdg && xdg.length > 0 ? xdg : join3(serveEnv["HOME"]?.trim() || homedir3(), ".config");
+  return join3(base, "opencode", "opencode.json");
+}
+function buildGlobalMcpConfig(materializedConfig) {
+  let parsed;
   try {
-    raw = readFileSync5(join3(projectDir2, "opencode.json"), "utf-8");
+    parsed = JSON.parse(materializedConfig);
   } catch {
+    return null;
+  }
+  if (typeof parsed !== "object" || parsed === null) return null;
+  const cfg = parsed;
+  if (!cfg.mcp || Object.keys(cfg.mcp).length === 0) return null;
+  return JSON.stringify(
+    { $schema: cfg.$schema ?? "https://opencode.ai/config.json", mcp: cfg.mcp },
+    null,
+    2
+  );
+}
+function writeConfigFile600(target, content, codeName, log2) {
+  try {
+    mkdirSync3(dirname2(target), { recursive: true });
+    writeFileSync3(target, content, { mode: 384 });
     try {
-      if (existsSync4(target)) rmSync2(target);
+      chmodSync2(target, 384);
     } catch {
     }
     return true;
-  }
-  try {
-    writeFileSync3(target, materializeEnvPlaceholders(raw, serveEnv), { mode: 384 });
   } catch (err) {
-    log2(`[opencode-session] failed to write materialized opencode.jsonc for '${codeName}': ${err.message}`);
+    log2(`[opencode-session] failed to write ${target} for '${codeName}': ${err.message}`);
     return false;
   }
+}
+function writeMaterializedOpencodeConfig(codeName, projectDir2, serveEnv, log2) {
+  const projectTarget = join3(projectDir2, MATERIALIZED_CONFIG_BASENAME);
+  const globalTarget = opencodeGlobalConfigPath(serveEnv);
+  let raw;
   try {
-    chmodSync2(target, 384);
+    raw = readFileSync5(join3(projectDir2, "opencode.json"), "utf-8");
   } catch {
+    for (const t of [projectTarget, globalTarget]) {
+      try {
+        if (existsSync4(t)) rmSync2(t);
+      } catch {
+      }
+    }
+    return true;
   }
-  return true;
+  const materialized = materializeEnvPlaceholders(raw, serveEnv);
+  const projectOk = writeConfigFile600(projectTarget, materialized, codeName, log2);
+  const globalMcp = buildGlobalMcpConfig(materialized);
+  let globalOk = true;
+  if (globalMcp) {
+    globalOk = writeConfigFile600(globalTarget, globalMcp, codeName, log2);
+  } else {
+    try {
+      if (existsSync4(globalTarget)) rmSync2(globalTarget);
+    } catch {
+    }
+  }
+  return projectOk && globalOk;
 }
 function baseUrlFor(port) {
   return `http://127.0.0.1:${port}`;
@@ -11647,4 +11706,4 @@ export {
   stopAllSessionsAndWait,
   getProjectDir
 };
-//# sourceMappingURL=chunk-JRML25UU.js.map
+//# sourceMappingURL=chunk-EFIXTBUQ.js.map