@integrity-labs/agt-cli 0.28.480 → 0.28.482

package/dist/bin/agt.js

@@ -40,7 +40,7 @@ import {
   success,
   table,
   warn
-} from "../chunk-JBDLGPQU.js";
+} from "../chunk-B6AXXPYQ.js";
 import {
   AnchorSessionClient,
   CHANNEL_REGISTRY,
@@ -71,7 +71,7 @@ import {
   requiredMcpWildcard,
   resolveChannels,
   serializeManifestForSlackCli
-} from "../chunk-EOH75U22.js";
+} from "../chunk-DNC5JGOV.js";
 import "../chunk-XWVM4KPK.js";
 
 // src/bin/agt.ts
@@ -4830,7 +4830,7 @@ import { execFileSync, execSync } from "child_process";
 import { existsSync as existsSync10, realpathSync as realpathSync2 } from "fs";
 import chalk18 from "chalk";
 import ora16 from "ora";
-var cliVersion = true ? "0.28.480" : "dev";
+var cliVersion = true ? "0.28.482" : "dev";
 async function fetchLatestVersion() {
   const host2 = getHost();
   if (!host2) return null;
@@ -6002,7 +6002,7 @@ function handleError(err) {
 }
 
 // src/bin/agt.ts
-var cliVersion2 = true ? "0.28.480" : "dev";
+var cliVersion2 = true ? "0.28.482" : "dev";
 var program = new Command();
 program.name("agt").description("Augmented CLI \u2014 agent provisioning and management").version(cliVersion2).option("--json", "Emit machine-readable JSON output (suppress spinners and colors)").option("--skip-update-check", "Skip the automatic update check on startup");
 program.hook("preAction", async (thisCommand, actionCommand) => {

package/dist/{chunk-JBDLGPQU.js → chunk-B6AXXPYQ.js}

@@ -30,7 +30,7 @@ import {
   resolveConnectivityProbe,
   worseConnectivityOutcome,
   wrapScheduledTaskPrompt
-} from "./chunk-EOH75U22.js";
+} from "./chunk-DNC5JGOV.js";
 import {
   parsePsRows
 } from "./chunk-XWVM4KPK.js";
@@ -2024,14 +2024,18 @@ function provisionStopHook(codeName) {
   settings["hooks"] = hooks;
   writeFileSync3(settingsPath, JSON.stringify(settings, null, 2));
 }
-function provisionIsolationHook(codeName) {
+function provisionIsolationHook(codeName, agentId) {
   const projectDir = getProjectDir(codeName);
   const claudeDir = join2(projectDir, ".claude");
   mkdirSync2(claudeDir, { recursive: true });
+  const hasAgentId = agentId !== void 0;
+  if (hasAgentId)
+    assertValidAgentId(agentId);
   const homeDir = getHomeDir();
   const augmentedBase = join2(homeDir, ".augmented");
-  const ownAgentDir = join2(augmentedBase, codeName);
+  const ownAgentDir = getAgentDir(codeName);
   const logFile = join2(ownAgentDir, "isolation.log");
+  const idAllowClause = hasAgentId ? ` && [ "$AGENT_DIR" != "${agentId}" ]` : "";
   const hookScriptPath = join2(claudeDir, "agt-isolation-hook.sh");
   const hookScript = [
     "#!/bin/bash",
@@ -2051,7 +2055,7 @@ function provisionIsolationHook(codeName) {
     `    if echo "$CMD" | grep -qE '${augmentedBase}/[^/]+/' 2>/dev/null; then`,
     `      MATCH=$(echo "$CMD" | grep -oE '${augmentedBase}/[^/]+' | head -1)`,
     `      AGENT_DIR=$(basename "$MATCH")`,
-    `      if [ "$AGENT_DIR" != "${codeName}" ] && [ "$AGENT_DIR" != "_mcp" ]; then`,
+    `      if [ "$AGENT_DIR" != "${codeName}" ]${idAllowClause} && [ "$AGENT_DIR" != "_mcp" ]; then`,
     `        echo "$(date -u +%Y-%m-%dT%H:%M:%SZ) BLOCKED bash targeting $MATCH" >> "${logFile}"`,
     `        echo "Access denied: you cannot access other agents' directories." >&2`,
     "        exit 2",
@@ -2076,7 +2080,7 @@ function provisionIsolationHook(codeName) {
     'case "$FILE_PATH" in',
     '  "$AUGMENTED_BASE"/*/*)  ',
     '    AGENT_DIR=$(echo "$FILE_PATH" | sed "s|$AUGMENTED_BASE/||" | cut -d/ -f1)',
-    `    if [ "$AGENT_DIR" != "${codeName}" ] && [ "$AGENT_DIR" != "_mcp" ]; then`,
+    `    if [ "$AGENT_DIR" != "${codeName}" ]${idAllowClause} && [ "$AGENT_DIR" != "_mcp" ]; then`,
     `      echo "$(date -u +%Y-%m-%dT%H:%M:%SZ) BLOCKED $TOOL on $FILE_PATH" >> "${logFile}"`,
     `      echo "Access denied: you cannot access other agents' directories." >&2`,
     "      exit 2",
@@ -2333,8 +2337,7 @@ function provisionOrientHook(codeName) {
   const projectDir = getProjectDir(codeName);
   const claudeDir = join2(projectDir, ".claude");
   mkdirSync2(claudeDir, { recursive: true });
-  const homeDir = getHomeDir();
-  const agentDir = join2(homeDir, ".augmented", codeName);
+  const agentDir = getAgentDir(codeName);
   const hookScriptPath = join2(claudeDir, "agt-orient-hook.sh");
   const hookScript = [
     "#!/bin/bash",
@@ -2515,8 +2518,7 @@ function provisionPreCompactHook(codeName) {
   const projectDir = getProjectDir(codeName);
   const claudeDir = join2(projectDir, ".claude");
   mkdirSync2(claudeDir, { recursive: true });
-  const homeDir = getHomeDir();
-  const agentDir = join2(homeDir, ".augmented", codeName);
+  const agentDir = getAgentDir(codeName);
   const jqNormalizeContent = '(.message.content // .content // []) | if type == "string" then [{type: "text", text: .}] elif type == "array" then . else [] end';
   const hookScriptPath = join2(claudeDir, "agt-pre-compact-hook.sh");
   const hookScript = [
@@ -2653,8 +2655,7 @@ function provisionSessionStateHook(codeName) {
   const projectDir = getProjectDir(codeName);
   const claudeDir = join2(projectDir, ".claude");
   mkdirSync2(claudeDir, { recursive: true });
-  const homeDir = getHomeDir();
-  const agentDir = join2(homeDir, ".augmented", codeName);
+  const agentDir = getAgentDir(codeName);
   const hookScriptPath = join2(claudeDir, "agt-session-state-hook.sh");
   const hookScript = `#!/usr/bin/env bash
 # Auto-generated by Augmented (ENG-6233 / ENG-6268) \u2014 SessionStart session-state
@@ -2867,15 +2868,20 @@ function buildSettingsJson(input) {
   const projectDir = getProjectDir(agent.code_name);
   const agentDir = getAgentDir(agent.code_name);
   const homeDir = getHomeDir();
+  const codenameAliasDir = join2(homeDir, ".augmented", agent.code_name);
   settings["allowedDirectories"] = [
-    projectDir,
-    // Agent's project dir (CLAUDE.md, settings.json, etc.)
-    agentDir,
-    // Agent's config dir (.env, schedules, registration)
-    join2(homeDir, ".augmented", "_mcp"),
-    // Shared MCP binaries
-    "/tmp"
-    // Temp files
+    .../* @__PURE__ */ new Set([
+      projectDir,
+      // Agent's project dir (CLAUDE.md, settings.json, etc.)
+      agentDir,
+      // Agent's config dir (.env, schedules, registration)
+      codenameAliasDir,
+      // Codename symlink alias (== agentDir for legacy agents)
+      join2(homeDir, ".augmented", "_mcp"),
+      // Shared MCP binaries
+      "/tmp"
+      // Temp files
+    ])
   ];
   settings["permissions"] = { deny: SECRETS_DENY_PERMISSIONS };
   return settings;
@@ -4007,11 +4013,11 @@ ${sections}`
       if (!appId || !clientSecret)
         return;
       const localTeamsChannel = join2(getHomeDir(), ".augmented", "_mcp", "teams-channel.js");
-      const homeDirMs = getHomeDir();
+      const agentDirMs = getAgentDir(codeName);
       try {
-        mkdirSync2(join2(homeDirMs, ".augmented", codeName, "msteams-pending-inbound", ".markers"), { recursive: true });
-        mkdirSync2(join2(homeDirMs, ".augmented", codeName, "msteams-pending-interactions"), { recursive: true });
-        mkdirSync2(join2(homeDirMs, ".augmented", codeName, "msteams-recovery-outbox"), { recursive: true });
+        mkdirSync2(join2(agentDirMs, "msteams-pending-inbound", ".markers"), { recursive: true });
+        mkdirSync2(join2(agentDirMs, "msteams-pending-interactions"), { recursive: true });
+        mkdirSync2(join2(agentDirMs, "msteams-recovery-outbox"), { recursive: true });
       } catch {
       }
       const tenantId = config["tenant_id"] ?? "common";
@@ -4108,7 +4114,7 @@ ${sections}`
       const phoneNumberId = config["phone_number_id"];
       if (projectApiKey && phoneNumberId) {
         try {
-          mkdirSync2(join2(getHomeDir(), ".augmented", codeName, "whatsapp-pending-inbound"), { recursive: true });
+          mkdirSync2(join2(getAgentDir(codeName), "whatsapp-pending-inbound"), { recursive: true });
         } catch {
         }
         writeEnvIntegrationsForAgent(codeName, {
@@ -4932,7 +4938,7 @@ function exchangeFailureKind(err) {
 }
 
 // src/lib/api-client.ts
-var agtCliVersion = true ? "0.28.480" : "dev";
+var agtCliVersion = true ? "0.28.482" : "dev";
 var lastConfigHash = null;
 function setConfigHash(hash) {
   lastConfigHash = hash && hash.length > 0 ? hash : null;
@@ -7661,4 +7667,4 @@ export {
   managerInstallSystemUnitCommand,
   managerUninstallSystemUnitCommand
 };
-//# sourceMappingURL=chunk-JBDLGPQU.js.map
+//# sourceMappingURL=chunk-B6AXXPYQ.js.map