@integrity-labs/agt-cli 0.28.934 → 0.28.936

package/dist/bin/agt.js

@@ -40,7 +40,7 @@ import {
   success,
   table,
   warn
-} from "../chunk-WM2VOATL.js";
+} from "../chunk-LN64VNHI.js";
 import {
   getProjectDir,
   isSessionResumeDisabled,
@@ -5467,7 +5467,7 @@ import { execFileSync, execSync } from "child_process";
 import { existsSync as existsSync11, realpathSync as realpathSync2 } from "fs";
 import chalk18 from "chalk";
 import ora16 from "ora";
-var cliVersion = true ? "0.28.934" : "dev";
+var cliVersion = true ? "0.28.936" : "dev";
 async function fetchLatestVersion() {
   const host2 = getHost();
   if (!host2) return null;
@@ -6727,7 +6727,7 @@ function handleError(err) {
 }
 
 // src/bin/agt.ts
-var cliVersion2 = true ? "0.28.934" : "dev";
+var cliVersion2 = true ? "0.28.936" : "dev";
 var program = new Command();
 program.name("agt").description("Augmented CLI \u2014 agent provisioning and management").version(cliVersion2).option("--json", "Emit machine-readable JSON output (suppress spinners and colors)").option("--skip-update-check", "Skip the automatic update check on startup");
 program.hook("preAction", async (thisCommand, actionCommand) => {

package/dist/{chunk-WM2VOATL.js → chunk-LN64VNHI.js}

@@ -3389,7 +3389,10 @@ function provisionIsolationHook(codeName, agentId) {
     "#      segment now stops at whitespace and shell metacharacters, so",
     "#      `cd <base>/<self> && ls x 2>/dev/null` is no longer read as an agent",
     "#      named `<self> && ls x 2>`. Check isolation.log before reading an entry",
-    "#      as an attempted breach all the same.",
+    "#      as an attempted breach all the same - and since CS-1691 the log says",
+    "#      which is which: BLOCKED is a resolved reach into another agent, and",
+    "#      REFUSED is a path nothing could resolve before execution (a glob, a",
+    "#      variable), which fires on an agent own directory routinely.",
     "#",
     "# Real isolation between co-located agents needs OS enforcement - a uid per",
     "# agent, a mount namespace, or a container per agent (ENG-4745, ENG-6633).",
@@ -3439,8 +3442,20 @@ function provisionIsolationHook(codeName, agentId) {
     "# for an accident-guard; not something to lean on as a boundary.",
     `OWN_REAL=$(basename -- "$(realpath -m -- "$AUGMENTED_BASE/${codeName}" 2>/dev/null || printf '%s' "${codeName}")")`,
     "",
+    "# CS-1691: TWO verbs, because this log is the only audit surface the guard",
+    "# has and it used to write both cases in the same words.",
+    "#   BLOCKED - a RESOLVED path into another agent directory. A real reach.",
+    "#   REFUSED - the path could not be resolved before execution (a glob, an",
+    "#             unexpanded variable). Refusing is correct, since nothing here",
+    "#             can know where it points - but it is NOT evidence of an",
+    "#             attempt, and it fires on an agent OWN directory routinely: a",
+    "#             glob over the base matches every sibling and the agent too.",
+    "# Measured before this split: 3 of one agent 5 entries, and 36 of another",
+    "# 36, were REFUSED-class while reading as BLOCKED. `grep BLOCKED` now",
+    '# answers "has anything actually reached across", which is the question',
+    "# people were already using this file to ask.",
     "deny() {",
-    '  echo "$(date -u +%Y-%m-%dT%H:%M:%SZ) BLOCKED $1" >> "$LOG_FILE" 2>/dev/null || true',
+    '  echo "$(date -u +%Y-%m-%dT%H:%M:%SZ) $1 $2" >> "$LOG_FILE" 2>/dev/null || true',
     `  echo "Access denied: you cannot access other agents' directories." >&2`,
     "  exit 2",
     "}",
@@ -3532,8 +3547,10 @@ function provisionIsolationHook(codeName, agentId) {
     "      # Refuse a path INTO the segment, a segment that is a directory (an",
     "      # agent dir named with no trailing slash), or one still to be expanded.",
     "      # A plain file at the base, such as manager.log, is not an agent.",
-    '      if [ "$REST" != "$AGENT_DIR" ] || [ -d "$AUGMENTED_BASE/$AGENT_DIR" ] || has_expansion "$AGENT_DIR"; then',
-    '        deny "bash targeting $AUGMENTED_BASE/$AGENT_DIR"',
+    '      if has_expansion "$AGENT_DIR"; then',
+    '        deny REFUSED "bash targeting $AUGMENTED_BASE/$AGENT_DIR"',
+    '      elif [ "$REST" != "$AGENT_DIR" ] || [ -d "$AUGMENTED_BASE/$AGENT_DIR" ]; then',
+    '        deny BLOCKED "bash targeting $AUGMENTED_BASE/$AGENT_DIR"',
     "      fi",
     "    fi",
     '  done <<< "$OCCURRENCES"',
@@ -3546,8 +3563,10 @@ function provisionIsolationHook(codeName, agentId) {
     '    PREST=${POCC#"$CLAUDE_PROJECTS_BASE"/}',
     "    PROJ_DIR=${PREST%/}",
     '    case "$PROJ_DIR" in .|..) continue ;; esac',
-    '    if other_agent_project "$PROJ_DIR" || has_expansion "$PROJ_DIR"; then',
-    '      deny "bash targeting $CLAUDE_PROJECTS_BASE/$PROJ_DIR"',
+    '    if has_expansion "$PROJ_DIR"; then',
+    '      deny REFUSED "bash targeting $CLAUDE_PROJECTS_BASE/$PROJ_DIR"',
+    '    elif other_agent_project "$PROJ_DIR"; then',
+    '      deny BLOCKED "bash targeting $CLAUDE_PROJECTS_BASE/$PROJ_DIR"',
     "    fi",
     '  done <<< "$POCCURRENCES"',
     "  exit 0",
@@ -3573,15 +3592,19 @@ function provisionIsolationHook(codeName, agentId) {
     '      local REST=${P#"$CANON_BASE"/}',
     "      local AGENT_DIR=${REST%%/*}",
     `      if [ "$AGENT_DIR" != "${codeName}" ]${idAllowClause} && [ "$AGENT_DIR" != "$OWN_REAL" ] && [ "$AGENT_DIR" != "_mcp" ]; then`,
-    '        if [ "$REST" != "$AGENT_DIR" ] || [ -d "$CANON_BASE/$AGENT_DIR" ] || has_expansion "$AGENT_DIR"; then',
-    '          deny "$TOOL on $P"',
+    '        if has_expansion "$AGENT_DIR"; then',
+    '          deny REFUSED "$TOOL on $P"',
+    '        elif [ "$REST" != "$AGENT_DIR" ] || [ -d "$CANON_BASE/$AGENT_DIR" ]; then',
+    '          deny BLOCKED "$TOOL on $P"',
     "        fi",
     "      fi ;;",
     `    "$CANON_PROJECTS"/?*)`,
     '      local PREST=${P#"$CANON_PROJECTS"/}',
     "      local PROJ_DIR=${PREST%%/*}",
-    '      if other_agent_project "$PROJ_DIR" || has_expansion "$PROJ_DIR"; then',
-    '        deny "$TOOL on $P"',
+    '      if has_expansion "$PROJ_DIR"; then',
+    '        deny REFUSED "$TOOL on $P"',
+    '      elif other_agent_project "$PROJ_DIR"; then',
+    '        deny BLOCKED "$TOOL on $P"',
     "      fi ;;",
     "  esac",
     "  return 0",
@@ -6942,7 +6965,7 @@ function exchangeFailureKind(err) {
 }
 
 // src/lib/api-client.ts
-var agtCliVersion = true ? "0.28.934" : "dev";
+var agtCliVersion = true ? "0.28.936" : "dev";
 var lastConfigHash = null;
 function setConfigHash(hash) {
   lastConfigHash = hash && hash.length > 0 ? hash : null;
@@ -11567,4 +11590,4 @@ export {
   managerInstallSystemUnitCommand,
   managerUninstallSystemUnitCommand
 };
-//# sourceMappingURL=chunk-WM2VOATL.js.map
+//# sourceMappingURL=chunk-LN64VNHI.js.map