@integrity-labs/agt-cli 0.28.670 → 0.28.672

package/dist/{chunk-Z4O42VGJ.js → chunk-EX6INJDG.js}

@@ -8,8 +8,11 @@ import {
   expandTemplateVars,
   isolationMode,
   log,
-  parseEnvIntegrations
-} from "./chunk-5GDKWIB3.js";
+  mergeEnvIntegrationsContent,
+  parseEnvFileEntries,
+  parseEnvIntegrations,
+  shellQuote
+} from "./chunk-YAVWYI5S.js";
 import {
   BIND_FAILURE_QUARANTINE_THRESHOLD,
   INTEGRATIONS_SECTION_END,
@@ -56,7 +59,7 @@ import {
   resolveConnectivityProbe,
   worseConnectivityOutcome,
   wrapScheduledTaskPrompt
-} from "./chunk-HGVJVYKW.js";
+} from "./chunk-YOID6KOQ.js";
 import {
   parsePsRows
 } from "./chunk-XWVM4KPK.js";
@@ -405,70 +408,6 @@ function extractCommandNotFound(stderr) {
   return null;
 }
 
-// ../../packages/core/dist/provisioning/env-integrations-file.js
-function shellQuote(value) {
-  return `'${value.replace(/'/g, `'\\''`)}'`;
-}
-var CHANNEL_SECRET_ENV_KEYS = [
-  "SLACK_BOT_TOKEN",
-  "SLACK_APP_TOKEN",
-  "TELEGRAM_BOT_TOKEN",
-  "MSTEAMS_CLIENT_SECRET"
-];
-var MCP_SERVER_SECRET_ENV_KEYS = [
-  "COMPOSIO_API_KEY",
-  "PIPEDREAM_CLIENT_SECRET"
-];
-var PRESERVED_ENV_KEYS = [
-  ...CHANNEL_SECRET_ENV_KEYS,
-  ...MCP_SERVER_SECRET_ENV_KEYS
-];
-var HEADER = "# Augmented integrations \u2014 auto-generated, do not edit";
-function parseEnvFileEntries(content) {
-  const out = /* @__PURE__ */ new Map();
-  for (const line of content.split("\n")) {
-    if (!line || line.startsWith("#") || !line.includes("="))
-      continue;
-    const eqIdx = line.indexOf("=");
-    out.set(line.slice(0, eqIdx), line.slice(eqIdx + 1));
-  }
-  return out;
-}
-function renderEnvIntegrations(entries) {
-  const lines = [HEADER];
-  for (const [key, rendered] of entries)
-    lines.push(`${key}=${rendered}`);
-  return lines.join("\n") + "\n";
-}
-function mergeEnvIntegrationsContent(existing, args) {
-  const current = existing === null ? /* @__PURE__ */ new Map() : parseEnvFileEntries(existing);
-  let next;
-  if (args.mode === "upsert") {
-    next = new Map(current);
-    for (const [key, raw] of Object.entries(args.updates)) {
-      if (raw === null)
-        next.delete(key);
-      else
-        next.set(key, shellQuote(raw));
-    }
-  } else {
-    next = /* @__PURE__ */ new Map();
-    for (const [key, raw] of Object.entries(args.updates)) {
-      if (raw !== null)
-        next.set(key, shellQuote(raw));
-    }
-    const preserve = args.preserveKeys ?? PRESERVED_ENV_KEYS;
-    for (const key of preserve) {
-      if (key in args.updates)
-        continue;
-      if (!next.has(key) && current.has(key)) {
-        next.set(key, current.get(key));
-      }
-    }
-  }
-  return renderEnvIntegrations(next);
-}
-
 // ../../packages/core/dist/provisioning/frameworks/claudecode/index.js
 import { readFileSync as readFileSync4, writeFileSync as writeFileSync4, mkdirSync as mkdirSync3, existsSync as existsSync4, chmodSync as chmodSync4, readdirSync, rmSync as rmSync2, copyFileSync, lstatSync, realpathSync, symlinkSync, readlinkSync, renameSync as renameSync4, opendirSync } from "fs";
 import { join as join3, relative, dirname as dirname3 } from "path";
@@ -4902,6 +4841,12 @@ ${sections}`
     const senderPolicyEnv = senderPolicyTeamId ? { AGT_TEAM_ID: senderPolicyTeamId } : {};
     const agentDir = getAgentDir(codeName);
     mkdirSync3(agentDir, { recursive: true });
+    const persistChannelSecrets = options?.channelSecretDelivery !== "spawn-env";
+    const channelSecretUpdates = (updates, fullKeySet) => {
+      if (persistChannelSecrets)
+        return updates;
+      return Object.fromEntries(fullKeySet.map((k) => [k, null]));
+    };
     const isPersistent = options?.sessionMode === "persistent";
     const peerDisabledMode = options?.peerDisabled ?? (options?.telegramPeerDisabled === true ? "all" : "off");
     if (channelId === "telegram") {
@@ -4914,7 +4859,7 @@ ${sections}`
       const resolvedAgtApiKeyForTelegram = process.env["AGT_API_KEY"]?.trim();
       writeEnvIntegrationsForAgent(codeName, {
         mode: "upsert",
-        updates: { TELEGRAM_BOT_TOKEN: botToken }
+        updates: channelSecretUpdates({ TELEGRAM_BOT_TOKEN: botToken }, ["TELEGRAM_BOT_TOKEN"])
       });
       const telegramEnv = {
         TELEGRAM_BOT_TOKEN: "${TELEGRAM_BOT_TOKEN}",
@@ -5068,10 +5013,10 @@ ${sections}`
           };
           writeEnvIntegrationsForAgent(codeName, {
             mode: "upsert",
-            updates: {
+            updates: channelSecretUpdates({
               SLACK_BOT_TOKEN: botToken,
               ...appToken ? { SLACK_APP_TOKEN: appToken } : {}
-            }
+            }, ["SLACK_BOT_TOKEN", "SLACK_APP_TOKEN"])
           });
           const localSlackChannel = join3(getHomeDir(), ".augmented", "_mcp", "slack-channel.js");
           const slackAvatarEnvUrl = resolveAvatarEnvUrl(options?.agentAvatarUrl).url;
@@ -5279,10 +5224,10 @@ ${sections}`
       };
       writeEnvIntegrationsForAgent(codeName, {
         mode: "upsert",
-        updates: {
+        updates: channelSecretUpdates({
           SLACK_BOT_TOKEN: botToken,
           ...appToken ? { SLACK_APP_TOKEN: appToken } : {}
-        }
+        }, ["SLACK_BOT_TOKEN", "SLACK_APP_TOKEN"])
       });
       const slackAvatarEnvUrl = resolveAvatarEnvUrl(options?.agentAvatarUrl).url;
       if (isPersistent && existsSync4(localSlackChannel)) {
@@ -5369,7 +5314,7 @@ ${sections}`
       };
       writeEnvIntegrationsForAgent(codeName, {
         mode: "upsert",
-        updates: { MSTEAMS_CLIENT_SECRET: clientSecret }
+        updates: channelSecretUpdates({ MSTEAMS_CLIENT_SECRET: clientSecret }, ["MSTEAMS_CLIENT_SECRET"])
       });
       const teamsEnv = {
         MSTEAMS_APP_ID: appId,
@@ -6347,7 +6292,7 @@ function exchangeFailureKind(err) {
 }
 
 // src/lib/api-client.ts
-var agtCliVersion = true ? "0.28.670" : "dev";
+var agtCliVersion = true ? "0.28.672" : "dev";
 var lastConfigHash = null;
 function setConfigHash(hash) {
   lastConfigHash = hash && hash.length > 0 ? hash : null;
@@ -10007,7 +9952,6 @@ export {
   LITERAL_SECRET_PATTERNS,
   safeWriteJsonAtomic,
   extractCommandNotFound,
-  CHANNEL_SECRET_ENV_KEYS,
   migrateAgentDirToIdKeyed,
   provisionStopHook,
   provisionIsolationHook,
@@ -10089,4 +10033,4 @@ export {
   managerInstallSystemUnitCommand,
   managerUninstallSystemUnitCommand
 };
-//# sourceMappingURL=chunk-Z4O42VGJ.js.map
+//# sourceMappingURL=chunk-EX6INJDG.js.map