@integrity-labs/agt-cli 0.28.490 → 0.28.491

package/dist/bin/agt.js

@@ -40,7 +40,7 @@ import {
   success,
   table,
   warn
-} from "../chunk-DNRXJESD.js";
+} from "../chunk-HA46Z4D6.js";
 import {
   AnchorSessionClient,
   CHANNEL_REGISTRY,
@@ -4830,7 +4830,7 @@ import { execFileSync, execSync } from "child_process";
 import { existsSync as existsSync10, realpathSync as realpathSync2 } from "fs";
 import chalk18 from "chalk";
 import ora16 from "ora";
-var cliVersion = true ? "0.28.490" : "dev";
+var cliVersion = true ? "0.28.491" : "dev";
 async function fetchLatestVersion() {
   const host2 = getHost();
   if (!host2) return null;
@@ -6002,7 +6002,7 @@ function handleError(err) {
 }
 
 // src/bin/agt.ts
-var cliVersion2 = true ? "0.28.490" : "dev";
+var cliVersion2 = true ? "0.28.491" : "dev";
 var program = new Command();
 program.name("agt").description("Augmented CLI \u2014 agent provisioning and management").version(cliVersion2).option("--json", "Emit machine-readable JSON output (suppress spinners and colors)").option("--skip-update-check", "Skip the automatic update check on startup");
 program.hook("preAction", async (thisCommand, actionCommand) => {

package/dist/{chunk-DNRXJESD.js → chunk-HA46Z4D6.js}

@@ -4964,7 +4964,7 @@ function exchangeFailureKind(err) {
 }
 
 // src/lib/api-client.ts
-var agtCliVersion = true ? "0.28.490" : "dev";
+var agtCliVersion = true ? "0.28.491" : "dev";
 var lastConfigHash = null;
 function setConfigHash(hash) {
   lastConfigHash = hash && hash.length > 0 ? hash : null;
@@ -6417,6 +6417,156 @@ function runCliProbe(binary, args, opts = {}) {
   });
 }
 
+// src/lib/session-tool-probe.ts
+function classifyMcpServer(entry) {
+  if (!entry || typeof entry !== "object") return "unknown";
+  const e = entry;
+  if (typeof e.command === "string") {
+    const env = e.env;
+    if (env && typeof env === "object" && typeof env["AGT_REMOTE_MCP_URL"] === "string" && typeof env["AGT_REMOTE_MCP_TOKEN_VAR"] === "string") {
+      return "oauth-proxy";
+    }
+    return "stdio";
+  }
+  if (typeof e.url === "string") return "http";
+  return "unknown";
+}
+function splitServerKeysByKind(mcpJson, serverKeys) {
+  const servers = mcpJson?.mcpServers ?? {};
+  const stdio = [];
+  const http = [];
+  const proxy = [];
+  for (const key of serverKeys) {
+    const kind = classifyMcpServer(servers[key]);
+    if (kind === "stdio") stdio.push(key);
+    else if (kind === "http") http.push(key);
+    else if (kind === "oauth-proxy") proxy.push(key);
+  }
+  return { stdio, http, proxy };
+}
+function computeSessionToolBindStatus(input) {
+  const {
+    stdioServerKeys,
+    httpServerKeys,
+    proxyServerKeys,
+    missingStdioKeys,
+    httpReachable,
+    sessionLoadedServerKeys
+  } = input;
+  if (stdioServerKeys.length === 0 && httpServerKeys.length === 0 && proxyServerKeys.length === 0)
+    return "unknown";
+  if (stdioServerKeys.some((k) => missingStdioKeys.has(k))) return "missing";
+  if (proxyServerKeys.some((k) => missingStdioKeys.has(k))) return "missing";
+  for (const k of proxyServerKeys) {
+    if (httpReachable.get(k) === false) return "unreachable";
+  }
+  let anyHttpUnconfirmed = false;
+  for (const k of httpServerKeys) {
+    if (!sessionLoadedServerKeys.has(k)) {
+      anyHttpUnconfirmed = true;
+      continue;
+    }
+    const reachable = httpReachable.get(k);
+    if (reachable === false) return "unreachable";
+    if (reachable === void 0) anyHttpUnconfirmed = true;
+  }
+  if (anyHttpUnconfirmed && stdioServerKeys.length === 0 && proxyServerKeys.length === 0)
+    return "unknown";
+  return "bound";
+}
+
+// src/lib/session-tool-bind-runner.ts
+var DEFAULT_INTERVAL_MS = 60 * 60 * 1e3;
+var DEFAULT_MAX_PER_RUN = 25;
+function sanitizeServerKey(definitionId) {
+  return definitionId.replace(/[^a-z0-9]/gi, "_").toLowerCase();
+}
+function resolveIntegrationServerKeys(definitionId, declaredKeys, hint) {
+  const declared = new Set(declaredKeys);
+  const candidates = [hint, definitionId, sanitizeServerKey(definitionId)].filter(
+    (k) => typeof k === "string" && k.length > 0
+  );
+  const out = /* @__PURE__ */ new Set();
+  for (const c of candidates) if (declared.has(c)) out.add(c);
+  return [...out];
+}
+function isDue(last, now, intervalMs) {
+  if (!last) return true;
+  const t = Date.parse(last);
+  if (Number.isNaN(t)) return true;
+  return now - t >= intervalMs;
+}
+async function runSessionToolBindProbes(integrations, options) {
+  const now = (options.now?.() ?? /* @__PURE__ */ new Date()).getTime();
+  const intervalMs = options.intervalMs ?? DEFAULT_INTERVAL_MS;
+  const maxPerRun = options.maxPerRun ?? DEFAULT_MAX_PER_RUN;
+  const due = integrations.filter((i) => isDue(i.last_session_tool_bind_at, now, intervalMs)).sort((a, b) => {
+    const ta = a.last_session_tool_bind_at ? Date.parse(a.last_session_tool_bind_at) : 0;
+    const tb = b.last_session_tool_bind_at ? Date.parse(b.last_session_tool_bind_at) : 0;
+    return ta - tb;
+  });
+  const batch = due.slice(0, maxPerRun);
+  const declaredKeys = Object.keys(options.mcpJson?.mcpServers ?? {});
+  const reports = [];
+  const rebindCandidates = [];
+  let skipped = 0;
+  let probed = 0;
+  for (const integ of batch) {
+    const keys = resolveIntegrationServerKeys(
+      integ.definition_id,
+      declaredKeys,
+      integ.mcp_server_key
+    );
+    if (keys.length === 0) {
+      skipped += 1;
+      continue;
+    }
+    probed += 1;
+    const { stdio, http, proxy } = splitServerKeysByKind(options.mcpJson, keys);
+    const httpReachable = /* @__PURE__ */ new Map();
+    for (const key of [...http, ...proxy]) {
+      let reachable;
+      try {
+        reachable = await options.probeHttp(key);
+      } catch {
+        reachable = void 0;
+      }
+      if (reachable !== void 0) httpReachable.set(key, reachable);
+    }
+    const status = computeSessionToolBindStatus({
+      stdioServerKeys: stdio,
+      httpServerKeys: http,
+      proxyServerKeys: proxy,
+      missingStdioKeys: options.missingStdioKeys,
+      httpReachable,
+      sessionLoadedServerKeys: options.sessionLoadedServerKeys ?? /* @__PURE__ */ new Set()
+    });
+    if (status === "unknown") {
+      skipped += 1;
+      continue;
+    }
+    reports.push({ integration_id: integ.id, scope: integ.scope, status });
+    if (status === "missing" || status === "unreachable") {
+      const failingKeys = /* @__PURE__ */ new Set();
+      for (const k of [...stdio, ...proxy]) {
+        if (options.missingStdioKeys.has(k)) failingKeys.add(k);
+      }
+      for (const k of proxy) {
+        if (httpReachable.get(k) === false) failingKeys.add(k);
+      }
+      if (failingKeys.size > 0) {
+        rebindCandidates.push({
+          integration_id: integ.id,
+          scope: integ.scope,
+          status,
+          serverKeys: [...failingKeys]
+        });
+      }
+    }
+  }
+  return { reports, rebindCandidates, due: due.length, probed, skipped };
+}
+
 // src/lib/connectivity-probe-context.ts
 function resolveHttpServerEntry(entry, env) {
   const unresolved = /* @__PURE__ */ new Set();
@@ -6455,6 +6605,19 @@ function readMcpHttpServerConfig(projectDir, serverKey, env) {
     return null;
   }
 }
+function resolveDeclaredServerKey(projectDir, definitionId, derivedKey) {
+  try {
+    const raw = readFileSync6(join5(projectDir, ".mcp.json"), "utf-8");
+    const servers = JSON.parse(raw).mcpServers ?? {};
+    const declared = Object.keys(servers);
+    if (derivedKey !== definitionId && derivedKey !== sanitizeServerKey(definitionId)) {
+      return declared.includes(derivedKey) ? derivedKey : null;
+    }
+    return resolveIntegrationServerKeys(definitionId, declared, derivedKey)[0] ?? null;
+  } catch {
+    return null;
+  }
+}
 function resolveStdioServerEntry(entry, env) {
   if (typeof entry.command !== "string") return null;
   const unresolved = /* @__PURE__ */ new Set();
@@ -6522,15 +6685,16 @@ function buildConnectivityProbeDeps(projectDir, probeEnv) {
     fetchImpl: fetch,
     runCli: (binary, args) => runCliProbe(binary, args, { env: probeEnv }),
     mcpProbe: async (target) => {
-      const cfg = target.inlineServerEntry ? resolveHttpServerEntry(target.inlineServerEntry, probeEnv) : readMcpHttpServerConfig(projectDir, target.serverKey, probeEnv);
+      const serverKey = target.inlineServerEntry ? target.serverKey : resolveDeclaredServerKey(projectDir, target.definitionId, target.serverKey) ?? target.serverKey;
+      const cfg = target.inlineServerEntry ? resolveHttpServerEntry(target.inlineServerEntry, probeEnv) : readMcpHttpServerConfig(projectDir, serverKey, probeEnv);
       if (!cfg) {
         const src = target.inlineServerEntry ? "inline config" : ".mcp.json";
-        return { status: "transient_error", message: `MCP server '${target.serverKey}' not resolvable from ${src}` };
+        return { status: "transient_error", message: `MCP server '${serverKey}' not resolvable from ${src}` };
       }
       if (cfg.unresolved.length > 0) {
         return {
           status: "transient_error",
-          message: `MCP '${target.serverKey}' auth unresolved: ${cfg.unresolved.join(", ")}`
+          message: `MCP '${serverKey}' auth unresolved: ${cfg.unresolved.join(", ")}`
         };
       }
       return probeMcpHttp(cfg);
@@ -6542,15 +6706,16 @@ function buildConnectivityProbeDeps(projectDir, probeEnv) {
     // env → skip as non-escalating, never spawn a doomed server. A missing
     // server entry is a real `down` — the tools aren't wired.
     mcpStdioProbe: async (target) => {
-      const cfg = target.inlineServerEntry ? resolveStdioServerEntry(target.inlineServerEntry, probeEnv) : readMcpStdioServerConfig(projectDir, target.serverKey, probeEnv);
+      const serverKey = target.inlineServerEntry ? target.serverKey : resolveDeclaredServerKey(projectDir, target.definitionId, target.serverKey) ?? target.serverKey;
+      const cfg = target.inlineServerEntry ? resolveStdioServerEntry(target.inlineServerEntry, probeEnv) : readMcpStdioServerConfig(projectDir, serverKey, probeEnv);
       if (!cfg) {
         const src = target.inlineServerEntry ? "inline config" : ".mcp.json";
-        return { status: "down", message: `MCP stdio server '${target.serverKey}' not wired in ${src}` };
+        return { status: "down", message: `MCP stdio server '${serverKey}' not wired in ${src}` };
       }
       if (cfg.unresolved.length > 0) {
         return {
           status: "transient_error",
-          message: `MCP stdio '${target.serverKey}' env unresolved: ${cfg.unresolved.join(", ")}`
+          message: `MCP stdio '${serverKey}' env unresolved: ${cfg.unresolved.join(", ")}`
         };
       }
       return probeMcpStdio({
@@ -6615,158 +6780,6 @@ function buildConnectivityProbeDeps(projectDir, probeEnv) {
 import { execFileSync as syncExecFile } from "child_process";
 import { readFileSync as readFileSync7 } from "fs";
 import { join as join6 } from "path";
-
-// src/lib/session-tool-probe.ts
-function classifyMcpServer(entry) {
-  if (!entry || typeof entry !== "object") return "unknown";
-  const e = entry;
-  if (typeof e.command === "string") {
-    const env = e.env;
-    if (env && typeof env === "object" && typeof env["AGT_REMOTE_MCP_URL"] === "string" && typeof env["AGT_REMOTE_MCP_TOKEN_VAR"] === "string") {
-      return "oauth-proxy";
-    }
-    return "stdio";
-  }
-  if (typeof e.url === "string") return "http";
-  return "unknown";
-}
-function splitServerKeysByKind(mcpJson, serverKeys) {
-  const servers = mcpJson?.mcpServers ?? {};
-  const stdio = [];
-  const http = [];
-  const proxy = [];
-  for (const key of serverKeys) {
-    const kind = classifyMcpServer(servers[key]);
-    if (kind === "stdio") stdio.push(key);
-    else if (kind === "http") http.push(key);
-    else if (kind === "oauth-proxy") proxy.push(key);
-  }
-  return { stdio, http, proxy };
-}
-function computeSessionToolBindStatus(input) {
-  const {
-    stdioServerKeys,
-    httpServerKeys,
-    proxyServerKeys,
-    missingStdioKeys,
-    httpReachable,
-    sessionLoadedServerKeys
-  } = input;
-  if (stdioServerKeys.length === 0 && httpServerKeys.length === 0 && proxyServerKeys.length === 0)
-    return "unknown";
-  if (stdioServerKeys.some((k) => missingStdioKeys.has(k))) return "missing";
-  if (proxyServerKeys.some((k) => missingStdioKeys.has(k))) return "missing";
-  for (const k of proxyServerKeys) {
-    if (httpReachable.get(k) === false) return "unreachable";
-  }
-  let anyHttpUnconfirmed = false;
-  for (const k of httpServerKeys) {
-    if (!sessionLoadedServerKeys.has(k)) {
-      anyHttpUnconfirmed = true;
-      continue;
-    }
-    const reachable = httpReachable.get(k);
-    if (reachable === false) return "unreachable";
-    if (reachable === void 0) anyHttpUnconfirmed = true;
-  }
-  if (anyHttpUnconfirmed && stdioServerKeys.length === 0 && proxyServerKeys.length === 0)
-    return "unknown";
-  return "bound";
-}
-
-// src/lib/session-tool-bind-runner.ts
-var DEFAULT_INTERVAL_MS = 60 * 60 * 1e3;
-var DEFAULT_MAX_PER_RUN = 25;
-function sanitizeServerKey(definitionId) {
-  return definitionId.replace(/[^a-z0-9]/gi, "_").toLowerCase();
-}
-function resolveIntegrationServerKeys(definitionId, declaredKeys, hint) {
-  const declared = new Set(declaredKeys);
-  const candidates = [hint, definitionId, sanitizeServerKey(definitionId)].filter(
-    (k) => typeof k === "string" && k.length > 0
-  );
-  const out = /* @__PURE__ */ new Set();
-  for (const c of candidates) if (declared.has(c)) out.add(c);
-  return [...out];
-}
-function isDue(last, now, intervalMs) {
-  if (!last) return true;
-  const t = Date.parse(last);
-  if (Number.isNaN(t)) return true;
-  return now - t >= intervalMs;
-}
-async function runSessionToolBindProbes(integrations, options) {
-  const now = (options.now?.() ?? /* @__PURE__ */ new Date()).getTime();
-  const intervalMs = options.intervalMs ?? DEFAULT_INTERVAL_MS;
-  const maxPerRun = options.maxPerRun ?? DEFAULT_MAX_PER_RUN;
-  const due = integrations.filter((i) => isDue(i.last_session_tool_bind_at, now, intervalMs)).sort((a, b) => {
-    const ta = a.last_session_tool_bind_at ? Date.parse(a.last_session_tool_bind_at) : 0;
-    const tb = b.last_session_tool_bind_at ? Date.parse(b.last_session_tool_bind_at) : 0;
-    return ta - tb;
-  });
-  const batch = due.slice(0, maxPerRun);
-  const declaredKeys = Object.keys(options.mcpJson?.mcpServers ?? {});
-  const reports = [];
-  const rebindCandidates = [];
-  let skipped = 0;
-  let probed = 0;
-  for (const integ of batch) {
-    const keys = resolveIntegrationServerKeys(
-      integ.definition_id,
-      declaredKeys,
-      integ.mcp_server_key
-    );
-    if (keys.length === 0) {
-      skipped += 1;
-      continue;
-    }
-    probed += 1;
-    const { stdio, http, proxy } = splitServerKeysByKind(options.mcpJson, keys);
-    const httpReachable = /* @__PURE__ */ new Map();
-    for (const key of [...http, ...proxy]) {
-      let reachable;
-      try {
-        reachable = await options.probeHttp(key);
-      } catch {
-        reachable = void 0;
-      }
-      if (reachable !== void 0) httpReachable.set(key, reachable);
-    }
-    const status = computeSessionToolBindStatus({
-      stdioServerKeys: stdio,
-      httpServerKeys: http,
-      proxyServerKeys: proxy,
-      missingStdioKeys: options.missingStdioKeys,
-      httpReachable,
-      sessionLoadedServerKeys: options.sessionLoadedServerKeys ?? /* @__PURE__ */ new Set()
-    });
-    if (status === "unknown") {
-      skipped += 1;
-      continue;
-    }
-    reports.push({ integration_id: integ.id, scope: integ.scope, status });
-    if (status === "missing" || status === "unreachable") {
-      const failingKeys = /* @__PURE__ */ new Set();
-      for (const k of [...stdio, ...proxy]) {
-        if (options.missingStdioKeys.has(k)) failingKeys.add(k);
-      }
-      for (const k of proxy) {
-        if (httpReachable.get(k) === false) failingKeys.add(k);
-      }
-      if (failingKeys.size > 0) {
-        rebindCandidates.push({
-          integration_id: integ.id,
-          scope: integ.scope,
-          status,
-          serverKeys: [...failingKeys]
-        });
-      }
-    }
-  }
-  return { reports, rebindCandidates, due: due.length, probed, skipped };
-}
-
-// src/lib/session-tool-bind-probe-host.ts
 async function gatherSessionToolBindProbe(agent, integrations, projectDir, opts) {
   if (integrations.length === 0) return null;
   let mcpJson = null;
@@ -7699,4 +7712,4 @@ export {
   managerInstallSystemUnitCommand,
   managerUninstallSystemUnitCommand
 };
-//# sourceMappingURL=chunk-DNRXJESD.js.map
+//# sourceMappingURL=chunk-HA46Z4D6.js.map