@integrity-labs/agt-cli 0.28.365 → 0.28.367

package/dist/bin/agt.js

@@ -40,7 +40,7 @@ import {
   success,
   table,
   warn
-} from "../chunk-7HNQ5ECS.js";
+} from "../chunk-3FUABX65.js";
 import {
   AnchorSessionClient,
   CHANNEL_REGISTRY,
@@ -70,7 +70,7 @@ import {
   renderTemplate,
   resolveChannels,
   serializeManifestForSlackCli
-} from "../chunk-N7Z6UOKY.js";
+} from "../chunk-COOBM6RF.js";
 import "../chunk-XWVM4KPK.js";
 
 // src/bin/agt.ts
@@ -4829,7 +4829,7 @@ import { execFileSync, execSync } from "child_process";
 import { existsSync as existsSync10, realpathSync as realpathSync2 } from "fs";
 import chalk18 from "chalk";
 import ora16 from "ora";
-var cliVersion = true ? "0.28.365" : "dev";
+var cliVersion = true ? "0.28.367" : "dev";
 async function fetchLatestVersion() {
   const host2 = getHost();
   if (!host2) return null;
@@ -6001,7 +6001,7 @@ function handleError(err) {
 }
 
 // src/bin/agt.ts
-var cliVersion2 = true ? "0.28.365" : "dev";
+var cliVersion2 = true ? "0.28.367" : "dev";
 var program = new Command();
 program.name("agt").description("Augmented CLI \u2014 agent provisioning and management").version(cliVersion2).option("--json", "Emit machine-readable JSON output (suppress spinners and colors)").option("--skip-update-check", "Skip the automatic update check on startup");
 program.hook("preAction", async (thisCommand, actionCommand) => {

package/dist/{chunk-7HNQ5ECS.js → chunk-3FUABX65.js}

@@ -20,7 +20,7 @@ import {
   resolveConnectivityProbe,
   worseConnectivityOutcome,
   wrapScheduledTaskPrompt
-} from "./chunk-N7Z6UOKY.js";
+} from "./chunk-COOBM6RF.js";
 import {
   parsePsRows
 } from "./chunk-XWVM4KPK.js";
@@ -6348,7 +6348,7 @@ function requireHost() {
 }
 
 // src/lib/api-client.ts
-var agtCliVersion = true ? "0.28.365" : "dev";
+var agtCliVersion = true ? "0.28.367" : "dev";
 var lastConfigHash = null;
 function setConfigHash(hash) {
   lastConfigHash = hash && hash.length > 0 ? hash : null;
@@ -8794,4 +8794,4 @@ export {
   managerInstallSystemUnitCommand,
   managerUninstallSystemUnitCommand
 };
-//# sourceMappingURL=chunk-7HNQ5ECS.js.map
+//# sourceMappingURL=chunk-3FUABX65.js.map

package/dist/{chunk-N7Z6UOKY.js → chunk-COOBM6RF.js}

@@ -5198,6 +5198,25 @@ var INTEGRATION_REGISTRY = [
         { event_type: "proxy_mb", unit: "MB", label: "Proxy data" },
         { event_type: "session_minute", unit: "minute", label: "Session time" }
       ]
+    },
+    // ENG-7961: the broker returns a session `connect_url`; the AGENT drives the
+    // session with the `browse` CDP CLI over Bash (`browse open <url> --cdp
+    // <connect_url>`). So the host needs the `browse` binary. The manager's
+    // ensureToolkitCli installs it (npm) when a browserbase integration is
+    // present for the agent - and it is ALSO baked into the agt-runtime image
+    // (Docker-isolated agents don't get host installs mounted in), exactly like
+    // the `gh` precedent (ENG-7662).
+    //
+    // browse needs NO host credential: the agent drives the broker-provisioned
+    // session over `connect_url`, and the Browserbase account key stays
+    // server-side (never materialized to the agent). `env_key` is a required
+    // field but INERT here - auth_type 'none' means no token is ever published
+    // under it (the claudecode provisioner guards on `env_key && token`).
+    cli_tool: {
+      package: "browse",
+      binary: "browse",
+      env_key: "BROWSERBASE_UNUSED",
+      installer: "npm"
     }
   },
   {
@@ -8792,6 +8811,46 @@ function buildOpencodeConfig(input, opts) {
     }
   };
 }
+function mergeOpencodeConfigArtifact(generatorContent, existingContent) {
+  const asRecord = (v) => typeof v === "object" && v !== null && !Array.isArray(v) ? v : {};
+  const parse = (raw) => {
+    try {
+      return asRecord(JSON.parse(raw));
+    } catch {
+      return {};
+    }
+  };
+  const generatorCfg = parse(generatorContent);
+  const existingCfg = existingContent ? parse(existingContent) : {};
+  const generatorMcp = asRecord(generatorCfg["mcp"]);
+  const existingMcp = asRecord(existingCfg["mcp"]);
+  const merged = { ...generatorCfg, mcp: { ...existingMcp, ...generatorMcp } };
+  const sliceKeys = (cfg) => [
+    ...Object.keys(generatorCfg),
+    ...Object.keys(cfg).filter((k) => !(k in generatorCfg)).sort()
+  ];
+  const slice = (cfg) => {
+    const out = {};
+    for (const k of sliceKeys(cfg)) {
+      if (k === "mcp") {
+        const srcMcp = asRecord(cfg["mcp"]);
+        const mcpSlice = {};
+        for (const s of Object.keys(generatorMcp))
+          if (s in srcMcp)
+            mcpSlice[s] = srcMcp[s];
+        out["mcp"] = mcpSlice;
+      } else if (k in cfg) {
+        out[k] = cfg[k];
+      }
+    }
+    return JSON.stringify(out);
+  };
+  return {
+    content: JSON.stringify(merged, null, 2),
+    generatorSlice: slice(generatorCfg),
+    existingSlice: existingContent ? slice(existingCfg) : null
+  };
+}
 
 // ../../packages/core/dist/provisioning/platform-storage.js
 var PLATFORM_STORAGE_RULE = "Store durable, reusable work you build (repeatable procedures, recurring responsibilities, scheduled automation, orchestration scripts) through the Augmented Team platform tools, never as loose local files, unless the user explicitly requests a different destination. Platform artifacts are versioned, reviewable, and survive re-provisioning; loose local files are wiped on the next provision rebuild, reach no one else, and bypass review. Ephemeral scratch files for the task at hand are fine on disk.";
@@ -9187,14 +9246,14 @@ function agentDir(codeName) {
   assertValidCodeName(codeName);
   return join(getHomeDir(), ".augmented", codeName);
 }
-function projectDir(codeName) {
-  return join(agentDir(codeName), "project");
+function provisionConfigDir(codeName) {
+  return join(agentDir(codeName), "provision");
 }
 function mcpBundlePath() {
   return join(getHomeDir(), ".augmented", "_mcp", MCP_BUNDLE_BASENAME);
 }
 function configPath(codeName) {
-  return join(projectDir(codeName), CONFIG_FILE);
+  return join(provisionConfigDir(codeName), CONFIG_FILE);
 }
 function readConfig(codeName) {
   const p2 = configPath(codeName);
@@ -9208,7 +9267,7 @@ function readConfig(codeName) {
 }
 function writeConfig(codeName, config) {
   const p2 = configPath(codeName);
-  mkdirSync(projectDir(codeName), { recursive: true });
+  mkdirSync(provisionConfigDir(codeName), { recursive: true });
   writeFileSync2(p2, JSON.stringify(config, null, 2));
 }
 function upsertEnvIntegrations(codeName, updates) {
@@ -9676,12 +9735,12 @@ function writeConfigFile600(target, content, codeName, log2) {
     return false;
   }
 }
-function writeMaterializedOpencodeConfig(codeName, projectDir2, serveEnv, log2) {
-  const projectTarget = join3(projectDir2, MATERIALIZED_CONFIG_BASENAME);
+function writeMaterializedOpencodeConfig(codeName, projectDir, serveEnv, log2) {
+  const projectTarget = join3(projectDir, MATERIALIZED_CONFIG_BASENAME);
   const globalTarget = opencodeGlobalConfigPath(serveEnv);
   let raw;
   try {
-    raw = readFileSync5(join3(projectDir2, "opencode.json"), "utf-8");
+    raw = readFileSync5(join3(projectDir, "opencode.json"), "utf-8");
   } catch {
     for (const t of [projectTarget, globalTarget]) {
       try {
@@ -9774,9 +9833,9 @@ async function startOpencodeSession(config) {
   return session;
 }
 async function spawnServe(config, session) {
-  const { codeName, projectDir: projectDir2, log: log2 } = config;
-  if (!existsSync4(join3(projectDir2, "opencode.json"))) {
-    log2(`[opencode-session] warning: no opencode.json in ${projectDir2} for '${codeName}' (provisioning may not have run)`);
+  const { codeName, projectDir, log: log2 } = config;
+  if (!existsSync4(join3(projectDir, "opencode.json"))) {
+    log2(`[opencode-session] warning: no opencode.json in ${projectDir} for '${codeName}' (provisioning may not have run)`);
   }
   const tmuxSession = opencodeTmuxSession(codeName);
   const port = await findFreePort();
@@ -9796,15 +9855,15 @@ async function spawnServe(config, session) {
   };
   if (config.runId) serveEnv["AGT_RUN_ID"] = config.runId;
   if (config.agentTimezone) serveEnv["TZ"] = config.agentTimezone;
-  if (!writeMaterializedOpencodeConfig(codeName, projectDir2, serveEnv, log2)) {
+  if (!writeMaterializedOpencodeConfig(codeName, projectDir, serveEnv, log2)) {
     throw new Error("failed to write materialized opencode.jsonc (serve would 401 on the {env:\u2026} template)");
   }
   const serveCmd = `${OPENCODE_BIN} serve --hostname 127.0.0.1 --port ${port} --print-logs`;
   log2(`[opencode-session] starting '${tmuxSession}' for '${codeName}' on 127.0.0.1:${port}`);
   const child = spawn(
     "tmux",
-    ["new-session", "-d", "-s", tmuxSession, "-c", projectDir2, serveCmd],
-    { cwd: projectDir2, stdio: ["ignore", "pipe", "pipe"], env: serveEnv }
+    ["new-session", "-d", "-s", tmuxSession, "-c", projectDir, serveCmd],
+    { cwd: projectDir, stdio: ["ignore", "pipe", "pipe"], env: serveEnv }
   );
   child.on("close", (code) => {
     if (code !== 0) {
@@ -10041,37 +10100,37 @@ function rotateDailySession(codeName, now = /* @__PURE__ */ new Date(), timezone
   writeFile(codeName, { current: next, history });
   return next.sessionId;
 }
-function encodeProjectPath(projectDir2) {
-  return "-" + projectDir2.replace(/^\//, "").replace(/[/.]/g, "-");
+function encodeProjectPath(projectDir) {
+  return "-" + projectDir.replace(/^\//, "").replace(/[/.]/g, "-");
 }
-function sessionFileExists(projectDir2, sessionId) {
+function sessionFileExists(projectDir, sessionId) {
   const path = join4(
     homedir4(),
     ".claude",
     "projects",
-    encodeProjectPath(projectDir2),
+    encodeProjectPath(projectDir),
     `${sessionId}.jsonl`
   );
   return existsSync5(path);
 }
-function sessionTranscriptDir(projectDir2) {
-  return join4(homedir4(), ".claude", "projects", encodeProjectPath(projectDir2));
+function sessionTranscriptDir(projectDir) {
+  return join4(homedir4(), ".claude", "projects", encodeProjectPath(projectDir));
 }
-function sessionFilePath(projectDir2, sessionId) {
-  return join4(sessionTranscriptDir(projectDir2), `${sessionId}.jsonl`);
+function sessionFilePath(projectDir, sessionId) {
+  return join4(sessionTranscriptDir(projectDir), `${sessionId}.jsonl`);
 }
-function transcriptActivityAgeSeconds(projectDir2, sessionId, now = /* @__PURE__ */ new Date()) {
+function transcriptActivityAgeSeconds(projectDir, sessionId, now = /* @__PURE__ */ new Date()) {
   if (!sessionId) return null;
   try {
-    const mtimeMs = statSync(sessionFilePath(projectDir2, sessionId)).mtimeMs;
+    const mtimeMs = statSync(sessionFilePath(projectDir, sessionId)).mtimeMs;
     return Math.max(0, Math.floor((now.getTime() - mtimeMs) / 1e3));
   } catch {
     return null;
   }
 }
-function subagentActivityAgeSeconds(projectDir2, sessionId, now = /* @__PURE__ */ new Date()) {
+function subagentActivityAgeSeconds(projectDir, sessionId, now = /* @__PURE__ */ new Date()) {
   if (!sessionId) return null;
-  const dir = join4(sessionTranscriptDir(projectDir2), sessionId, "subagents");
+  const dir = join4(sessionTranscriptDir(projectDir), sessionId, "subagents");
   try {
     let freshestMtimeMs = null;
     for (const name of readdirSync2(dir)) {
@@ -10088,8 +10147,8 @@ function subagentActivityAgeSeconds(projectDir2, sessionId, now = /* @__PURE__ *
     return null;
   }
 }
-function isAgentIdle(projectDir2, sessionId, idleSeconds = 60, now = /* @__PURE__ */ new Date()) {
-  const path = sessionFilePath(projectDir2, sessionId);
+function isAgentIdle(projectDir, sessionId, idleSeconds = 60, now = /* @__PURE__ */ new Date()) {
+  const path = sessionFilePath(projectDir, sessionId);
   if (!existsSync5(path)) return true;
   try {
     const mtimeMs = statSync(path).mtimeMs;
@@ -10545,7 +10604,7 @@ function restartEgressSidecar(codeName) {
   }
 }
 function buildDockerRunCommand(args) {
-  const { codeName, agentId, wrapperPath, projectDir: projectDir2, homeDir, runId, passApiKey, passOpenRouter, egress, forwardSlackReplyBinding, forwardBlockTurnEndAllMarkers, forwardKanbanWaiting, forwardNotifyDispatch } = args;
+  const { codeName, agentId, wrapperPath, projectDir, homeDir, runId, passApiKey, passOpenRouter, egress, forwardSlackReplyBinding, forwardBlockTurnEndAllMarkers, forwardKanbanWaiting, forwardNotifyDispatch } = args;
   const q = (s) => `'${s.replace(/'/g, `'\\''`)}'`;
   const agentDir2 = join5(homeDir, ".augmented", codeName);
   const agentIdDir = join5(homeDir, ".augmented", agentId);
@@ -10622,7 +10681,7 @@ function buildDockerRunCommand(args) {
     "--security-opt no-new-privileges",
     ...networkArgs,
     ...mounts,
-    `-w ${q(projectDir2)}`,
+    `-w ${q(projectDir)}`,
     ...envArgs,
     q(image),
     q(wrapperPath)
@@ -10630,9 +10689,9 @@ function buildDockerRunCommand(args) {
   return egress ? `${egressSetup} && ${runCmd}` : `docker rm -f agt-${codeName} >/dev/null 2>&1; ${runCmd}`;
 }
 function writePersistentClaudeWrapper(args) {
-  const { projectDir: projectDir2, claudeBin, initPrompt, claudeArgsJoined } = args;
-  const envIntegrationsPath = join5(projectDir2, ".env.integrations");
-  const wrapperPath = join5(projectDir2, ".claude", "persistent-claude.sh");
+  const { projectDir, claudeBin, initPrompt, claudeArgsJoined } = args;
+  const envIntegrationsPath = join5(projectDir, ".env.integrations");
+  const wrapperPath = join5(projectDir, ".claude", "persistent-claude.sh");
   const wrapperLines = [
     "#!/usr/bin/env bash",
     "set -e",
@@ -10651,7 +10710,7 @@ function writePersistentClaudeWrapper(args) {
   wrapperLines.push(
     `exec ${JSON.stringify(claudeBin)} ${initPromptArg}${claudeArgsJoined}`
   );
-  mkdirSync5(join5(projectDir2, ".claude"), { recursive: true });
+  mkdirSync5(join5(projectDir, ".claude"), { recursive: true });
   writeFileSync5(wrapperPath, wrapperLines.join("\n") + "\n", { mode: 448 });
   chmodSync3(wrapperPath, 448);
   return wrapperPath;
@@ -10745,7 +10804,7 @@ function getLastFailureContext(codeName) {
   };
 }
 function resolveSessionSpawnDecision(args) {
-  const { codeName, projectDir: projectDir2, agentTimezone } = args;
+  const { codeName, projectDir, agentTimezone } = args;
   const now = args.now ?? /* @__PURE__ */ new Date();
   const disableFlag = process.env["AGT_DISABLE_SESSION_RESUME"];
   const resumeDisabled = disableFlag === "1" || disableFlag?.toLowerCase() === "true";
@@ -10753,7 +10812,7 @@ function resolveSessionSpawnDecision(args) {
     return { flag: "--session-id", sessionId: randomUUID2(), reason: "resume-disabled" };
   }
   const daily = getOrCreateDailySession(codeName, now, agentTimezone);
-  if (!daily.isNew && sessionFileExists(projectDir2, daily.sessionId)) {
+  if (!daily.isNew && sessionFileExists(projectDir, daily.sessionId)) {
     return { flag: "--resume", sessionId: daily.sessionId, reason: "resume-today" };
   }
   if (daily.isNew) {
@@ -10812,7 +10871,7 @@ function startPersistentSession(config) {
   return session;
 }
 function spawnSession(config, session) {
-  const { codeName, projectDir: projectDir2, mcpConfigPath, claudeMdPath, channels, devChannels, apiHost, log: log2 } = config;
+  const { codeName, projectDir, mcpConfigPath, claudeMdPath, channels, devChannels, apiHost, log: log2 } = config;
   const claudeAuthMode = config.claudeAuthMode ?? "subscription";
   const openRouterMode = !!config.openRouter;
   const tmuxSession = `agt-${codeName}`;
@@ -10856,7 +10915,7 @@ function spawnSession(config, session) {
     const args = [];
     const decision = resolveSessionSpawnDecision({
       codeName,
-      projectDir: projectDir2,
+      projectDir,
       agentTimezone: config.agentTimezone ?? void 0
     });
     const sessionId = decision.sessionId;
@@ -10906,7 +10965,7 @@ function spawnSession(config, session) {
     const claudeBin = resolveClaudeBinary();
     const claudeArgsJoined = args.map((a) => a.includes(" ") || a.includes("*") ? JSON.stringify(a) : a).join(" ");
     const wrapperPath = writePersistentClaudeWrapper({
-      projectDir: projectDir2,
+      projectDir,
       claudeBin,
       initPrompt,
       claudeArgsJoined
@@ -10947,7 +11006,7 @@ function spawnSession(config, session) {
       codeName,
       agentId: config.agentId,
       wrapperPath,
-      projectDir: projectDir2,
+      projectDir,
       homeDir: sessionHomeDir,
       runId: config.runId ?? void 0,
       passApiKey: !openRouterMode && claudeAuthMode === "api_key" && !!config.anthropicApiKey,
@@ -10998,7 +11057,7 @@ function spawnSession(config, session) {
     } : { ...tmuxEnv, ...apiKeyEnv, ...openRouterEnv };
     for (const f of probeMcpEnvSubstitution({
       mcpConfigPath,
-      envIntegrationsPath: join5(projectDir2, ".env.integrations"),
+      envIntegrationsPath: join5(projectDir, ".env.integrations"),
       baseEnv: probeBaseEnv
     })) {
       log2(`[persistent-session] ${formatMissingVar(f)} agent=${codeName}`);
@@ -11009,11 +11068,11 @@ function spawnSession(config, session) {
       "-s",
       tmuxSession,
       "-c",
-      projectDir2,
+      projectDir,
       ...tmuxSessionEnvArgs,
       claudeCmd
     ], {
-      cwd: projectDir2,
+      cwd: projectDir,
       stdio: ["ignore", "pipe", "pipe"],
       env: tmuxEnv
     });
@@ -11556,6 +11615,7 @@ export {
   getIntegration,
   OAUTH_PROVIDERS,
   toOpencodeModel,
+  mergeOpencodeConfigArtifact,
   readChannelServerEnv,
   formatActorId,
   isSelfCompletion,
@@ -11687,4 +11747,4 @@ export {
   stopAllSessionsAndWait,
   getProjectDir
 };
-//# sourceMappingURL=chunk-N7Z6UOKY.js.map
+//# sourceMappingURL=chunk-COOBM6RF.js.map