@integrity-labs/agt-cli 0.28.781 → 0.28.782

package/dist/bin/agt.js

@@ -40,7 +40,7 @@ import {
   success,
   table,
   warn
-} from "../chunk-GFKNOWPF.js";
+} from "../chunk-WP2NPGER.js";
 import {
   getProjectDir,
   isSessionResumeDisabled,
@@ -5467,7 +5467,7 @@ import { execFileSync, execSync } from "child_process";
 import { existsSync as existsSync11, realpathSync as realpathSync2 } from "fs";
 import chalk18 from "chalk";
 import ora16 from "ora";
-var cliVersion = true ? "0.28.781" : "dev";
+var cliVersion = true ? "0.28.782" : "dev";
 async function fetchLatestVersion() {
   const host2 = getHost();
   if (!host2) return null;
@@ -6658,7 +6658,7 @@ function handleError(err) {
 }
 
 // src/bin/agt.ts
-var cliVersion2 = true ? "0.28.781" : "dev";
+var cliVersion2 = true ? "0.28.782" : "dev";
 var program = new Command();
 program.name("agt").description("Augmented CLI \u2014 agent provisioning and management").version(cliVersion2).option("--json", "Emit machine-readable JSON output (suppress spinners and colors)").option("--skip-update-check", "Skip the automatic update check on startup");
 program.hook("preAction", async (thisCommand, actionCommand) => {

package/dist/{chunk-GFKNOWPF.js → chunk-WP2NPGER.js}

@@ -3647,6 +3647,7 @@ function provisionOrientHook(codeName) {
   const claudeDir = join3(projectDir, ".claude");
   mkdirSync3(claudeDir, { recursive: true });
   const agentDir = getAgentDir(codeName);
+  const codeRoots = [join3(getHomeDir(), "code"), join3(agentDir, "code")];
   const hookScriptPath = join3(claudeDir, "agt-orient-hook.sh");
   const hookScript = [
     "#!/bin/bash",
@@ -3658,6 +3659,7 @@ function provisionOrientHook(codeName) {
     "",
     `CODE_NAME="${codeName}"`,
     `AGENT_DIR="${agentDir}"`,
+    `CODE_ROOTS=(${codeRoots.map((d) => `"${d}"`).join(" ")})`,
     "NOW_ISO=$(date -u +%Y-%m-%dT%H:%M:%SZ)",
     'NOW_LOCAL=$(date "+%Y-%m-%d %H:%M %Z")',
     "",
@@ -3749,6 +3751,101 @@ function provisionOrientHook(codeName) {
     "echo",
     'echo "Before you respond, call **kanban_list** to see your in-progress and recently-completed cards and reconstruct what you were working on. If a card is still \\"in_progress\\" (or a queued message above maps to one), that is almost certainly the work you were interrupted on - pick it back up. Use **kanban_search** for older or already-closed cards if needed. As you resume, update the card (kanban_progress / kanban_log) so the next restart has an even clearer trail. Do NOT re-do a card already marked done."',
     "",
+    "",
+    "# --- Code checkouts (ENG-9863) -----------------------------------------",
+    "# An agent clones a repo once and nothing ever moves it again, so a working",
+    "# tree drifts silently and continuously behind the branch it was cut from.",
+    "# The failure this prevents is specific and nasty: a grep against a stale",
+    "# tree returns a CONFIDENT ZERO for a symbol that exists on main, and a",
+    "# negative result reads as a finding rather than as an error. sherlock was",
+    "# one step from telling a teammate her correct report was wrong, off a tree",
+    "# 1,244 commits behind (ENG-9863).",
+    "#",
+    "# Two independent lags, and the second is the one that catches people out:",
+    "#   1. the working tree behind the remote-tracking ref, and",
+    "#   2. that ref behind the actual remote, because nothing fetches either.",
+    "# So `git show origin/main:<path>` \u2014 the obvious workaround \u2014 is ALSO stale,",
+    "# silently, which is why the advice below leads with a fetch.",
+    "#",
+    "# Local git only: no network. A fetch here would put an unbounded remote",
+    "# round trip per repo in front of every session boot, and this hook has to",
+    "# stay fast and offline-safe. Reporting the ref's AGE instead tells the",
+    "# agent how much to trust it without paying for the answer.",
+    "#",
+    "# Clones only, never worktrees (`.git` as a FILE): a worktree sits on a",
+    "# feature branch that is behind main on purpose, so counting it would emit",
+    "# a line per branch and train the reader to skip the section.",
+    "echo",
+    'echo "## Code checkouts"',
+    "stale_repos=0",
+    "checked_repos=0",
+    "# Counted separately and REPORTED, never folded into checked_repos. A repo",
+    "# with no upstream cannot be measured, and quietly excluding it would make",
+    '# "All N checkout(s) current" a claim about a smaller set than the reader',
+    "# thinks \u2014 which is this whole section's bug wearing a different number",
+    "# (CodeRabbit, PR #5434).",
+    "unmeasured_repos=0",
+    "if command -v git >/dev/null 2>&1; then",
+    '  for root in "${CODE_ROOTS[@]}"; do',
+    '    [ -d "$root" ] || continue',
+    '    for repo in "$root"/*; do',
+    // `.git` must be a DIRECTORY: a worktree has it as a file containing `gitdir:`.
+    '      [ -d "$repo/.git" ] || continue',
+    '      name=$(basename "$repo")',
+    "      # The branch this checkout tracks, whatever it is called. Falls back to",
+    "      # origin/HEAD so a repo whose default is `preprod` (or anything else)",
+    "      # is measured against ITS default rather than an assumed `main`.",
+    '      upstream=$(git -C "$repo" rev-parse --abbrev-ref --symbolic-full-name "@{upstream}" 2>/dev/null || true)',
+    '      if [ -z "$upstream" ]; then',
+    '        upstream=$(git -C "$repo" symbolic-ref --short refs/remotes/origin/HEAD 2>/dev/null || true)',
+    "      fi",
+    "      # Detached HEAD, no remote, a clone with no origin/HEAD, or a tree git",
+    "      # rejects outright. Say so out loud: an unmeasurable checkout is the",
+    "      # one most likely to be answering questions wrongly, and silence about",
+    "      # it reads exactly like health.",
+    '      if [ -z "$upstream" ]; then',
+    "        unmeasured_repos=$((unmeasured_repos + 1))",
+    '        echo "- ${name}: no upstream to compare against \u2014 NOT measured"',
+    "        continue",
+    "      fi",
+    "      checked_repos=$((checked_repos + 1))",
+    '      behind=$(git -C "$repo" rev-list --count "HEAD..$upstream" 2>/dev/null || echo 0)',
+    "      # How old the remote-tracking ref itself is. No FETCH_HEAD means",
+    "      # nothing has fetched since the clone, which is the worst case and the",
+    "      # easiest one to mistake for a healthy repo.",
+    "      # No FETCH_HEAD means nothing has fetched SINCE THE CLONE, which is not",
+    '      # the same as "stale" \u2014 a clone made ten minutes ago is current. So fall',
+    "      # back to the clone's own age (.git/config is written once, at clone,",
+    "      # and rarely again) rather than treating every new clone as rotten. A",
+    "      # false alarm on a fresh clone would be the fastest way to teach the",
+    "      # reader to skip this section.",
+    '      fetch_head="$repo/.git/FETCH_HEAD"',
+    '      if [ -f "$fetch_head" ]; then',
+    '        fetch_age_h=$(( ( $(date +%s) - $(stat -c %Y "$fetch_head" 2>/dev/null || date +%s) ) / 3600 ))',
+    '        fetch_note="refs fetched ${fetch_age_h}h ago"',
+    "      else",
+    '        fetch_age_h=$(( ( $(date +%s) - $(stat -c %Y "$repo/.git/config" 2>/dev/null || date +%s) ) / 3600 ))',
+    '        fetch_note="NEVER fetched since it was cloned ${fetch_age_h}h ago"',
+    "      fi",
+    "      # One line only when something is actually off. A current checkout",
+    "      # printing every session is noise, and noise is how a real warning",
+    "      # stops being read.",
+    '      if [ "$behind" -gt 0 ] || [ "$fetch_age_h" -ge 24 ]; then',
+    "        stale_repos=$((stale_repos + 1))",
+    '        echo "- ${name}: ${behind} commit(s) behind ${upstream}, ${fetch_note}"',
+    "      fi",
+    "    done",
+    "  done",
+    "fi",
+    'if [ "$checked_repos" -eq 0 ] && [ "$unmeasured_repos" -eq 0 ]; then',
+    '  echo "- No git checkouts found."',
+    'elif [ "$stale_repos" -eq 0 ] && [ "$unmeasured_repos" -eq 0 ]; then',
+    '  echo "- All ${checked_repos} checkout(s) current."',
+    "else",
+    "  echo",
+    '  echo "**Do not answer a question about what the code currently does from a stale tree.** A grep that finds nothing there is not evidence the symbol does not exist. Run \\`git -C <repo> fetch\\` FIRST \u2014 the remote-tracking ref is stale too \u2014 then read through it: \\`git show <upstream>:<path>\\`, or \\`git grep <pattern> <upstream> -- <narrow path>\\` (narrow it; a whole-repo git grep against a ref can take minutes). Line numbers from a stale tree are wrong even when the conclusion is right."',
+    "fi",
+    "",
     "echo",
     'echo "## Next step"',
     "echo",
@@ -6395,7 +6492,7 @@ function exchangeFailureKind(err) {
 }
 
 // src/lib/api-client.ts
-var agtCliVersion = true ? "0.28.781" : "dev";
+var agtCliVersion = true ? "0.28.782" : "dev";
 var lastConfigHash = null;
 function setConfigHash(hash) {
   lastConfigHash = hash && hash.length > 0 ? hash : null;
@@ -10632,4 +10729,4 @@ export {
   managerInstallSystemUnitCommand,
   managerUninstallSystemUnitCommand
 };
-//# sourceMappingURL=chunk-GFKNOWPF.js.map
+//# sourceMappingURL=chunk-WP2NPGER.js.map