@phnx-labs/agents-cli 1.20.14 → 1.20.15

package/dist/commands/repo.js

@@ -23,7 +23,7 @@ function resolveRepoPath(target) {
     }
     return path.join(HOME, `.agents-${trimmed}`);
 }
-import { ensureAgentsDir, getExtraRepoDir, getSystemAgentsDir, getUserAgentsDir, readMeta, resolveExtraRepoDir, updateMeta, } from '../lib/state.js';
+import { applyExtraAliasToVersions, ensureAgentsDir, getExtraRepoDir, getSystemAgentsDir, getUserAgentsDir, readMeta, resolveExtraRepoDir, updateMeta, } from '../lib/state.js';
 import { parseSource, pullRepo, commitAndPush, isGitRepo, isSystemRepoOrigin } from '../lib/git.js';
 import { DEFAULT_SYSTEM_REPO } from '../lib/types.js';
 import { ALL_AGENT_IDS, isAgentName, resolveAgentName } from '../lib/agents.js';
@@ -259,6 +259,7 @@ export function registerRepoCommands(program) {
             const commit = log.latest?.hash.slice(0, 8) || 'unknown';
             extras[alias] = { url: targetDir, path: targetDir, enabled: true };
             updateMeta({ extraRepos: extras });
+            syncExtraAliasAcrossVersions(alias, true);
             spinner.succeed(`Created ${targetDir} (${commit})`);
             console.log(chalk.gray(`\nRegistered as "${alias}". Edit files there, then add your own git remote when ready.`));
         }
@@ -306,6 +307,7 @@ export function registerRepoCommands(program) {
         if (parsed.type === 'local') {
             extras[alias] = { url: parsed.url, path: parsed.url, enabled: true };
             updateMeta({ extraRepos: extras });
+            syncExtraAliasAcrossVersions(alias, true);
             syncMarketplacesForDefaults();
             console.log(chalk.green(`Registered local repo "${alias}" -> ${parsed.url}`));
             return;
@@ -342,6 +344,7 @@ export function registerRepoCommands(program) {
         }
         extras[alias] = { url: parsed.url, path: targetDir, enabled: true };
         updateMeta({ extraRepos: extras });
+        syncExtraAliasAcrossVersions(alias, true);
         syncMarketplacesForDefaults();
         console.log(chalk.gray(`\nRegistered as "${alias}". Skills and commands from this repo will be`));
         console.log(chalk.gray(`picked up automatically the next time you launch any agent.`));
@@ -379,6 +382,7 @@ export function registerRepoCommands(program) {
         }
         delete extras[alias];
         updateMeta({ extraRepos: extras });
+        syncExtraAliasAcrossVersions(alias, false);
         syncMarketplacesForDefaults();
         console.log(chalk.green(`Removed "${alias}"`));
     });
@@ -592,6 +596,19 @@ function collectRepoTargets(alias) {
     }
     return [found];
 }
+/**
+ * Keep already-installed versions' selectors in sync with an extra-repo change:
+ * add `<alias>:*` when the repo is registered/enabled, strip it when removed.
+ * Newly-installed versions inherit it from `defaultPatterns()` at scaffold time,
+ * so without this a repo added after install is invisible to existing versions.
+ */
+function syncExtraAliasAcrossVersions(alias, add) {
+    const n = applyExtraAliasToVersions(alias, add);
+    if (n > 0) {
+        const verb = add ? 'Added to' : 'Removed from';
+        console.log(chalk.gray(`${verb} ${n} existing version selector${n === 1 ? '' : 's'}.`));
+    }
+}
 async function toggle(alias, enabled) {
     const meta = readMeta();
     const extras = { ...(meta.extraRepos || {}) };
@@ -606,6 +623,10 @@ async function toggle(alias, enabled) {
     }
     extras[alias] = { ...extras[alias], enabled };
     updateMeta({ extraRepos: extras });
+    // Re-enabling backfills the alias into existing versions; disabling leaves the
+    // selectors (resolution skips disabled extras) so a later enable is a no-op.
+    if (enabled)
+        syncExtraAliasAcrossVersions(alias, true);
     syncMarketplacesForDefaults();
     console.log(chalk.green(`${enabled ? 'Enabled' : 'Disabled'} "${alias}"`));
 }

package/dist/lib/browser/service.js

@@ -1701,24 +1701,34 @@ export class BrowserService {
             targetId: tabId,
             flatten: true,
         }));
-        // Inject a one-shot stealth shim before any page script runs. Chromium
-        // unconditionally exposes navigator.webdriver = true when a remote-debug
-        // transport is attached; Cloudflare Turnstile, hCaptcha, and similar bot
-        // checks read that property first. For browsers agents-cli spawns the
-        // --disable-blink-features=AutomationControlled launch flag already
-        // covers this, but for attach-to-running profiles (the Comet / Arc /
-        // Brave case where the user launched the browser themselves) the flag
-        // is unavailable — Page.addScriptToEvaluateOnNewDocument is the only
-        // lever. Non-page targets (workers, service workers) will reject these
-        // calls; we swallow the error and keep going.
-        try {
-            await conn.cdp.send('Page.enable', {}, sessionId);
-            await conn.cdp.send('Page.addScriptToEvaluateOnNewDocument', {
-                source: "Object.defineProperty(navigator,'webdriver',{get:()=>undefined});",
-            }, sessionId);
-        }
-        catch {
-            // Target doesn't support Page domain — nothing to inject.
+        // Inject a stealth shim before any page script runs. Chromium exposes
+        // navigator.webdriver = true whenever a remote-debug transport is attached;
+        // Cloudflare Turnstile, hCaptcha, and similar bot checks read it first.
+        //
+        // Only attach-to-running profiles (conn.pid === 0 — Comet / Arc / Brave the
+        // user launched themselves) need this. Browsers agents-cli spawns already
+        // carry the --disable-blink-features=AutomationControlled launch flag, which
+        // makes navigator.webdriver a native Navigator.prototype getter returning
+        // false — indistinguishable from an untouched browser. Injecting on top of
+        // that is actively harmful: it defines an OWN getter on the instance, and an
+        // own `webdriver` descriptor (native lives on the prototype) returning
+        // `undefined` (native returns `false`) is itself a tampering signal that
+        // bot.sannysoft.com and similar tests flag as "WebDriver present".
+        //
+        // When we do inject (attach mode), mirror native semantics exactly: define
+        // on Navigator.prototype and return false, so no own descriptor leaks and
+        // the value matches a real browser. Non-page targets (workers, service
+        // workers) reject these calls; swallow the error and keep going.
+        if (conn.pid === 0) {
+            try {
+                await conn.cdp.send('Page.enable', {}, sessionId);
+                await conn.cdp.send('Page.addScriptToEvaluateOnNewDocument', {
+                    source: "Object.defineProperty(Navigator.prototype,'webdriver',{get:()=>false,configurable:true});",
+                }, sessionId);
+            }
+            catch {
+                // Target doesn't support Page domain — nothing to inject.
+            }
         }
         conn.sessionCache.set(tabId, sessionId);
         return sessionId;

package/dist/lib/shims.js

@@ -685,7 +685,10 @@ export function ensureVersionedAliasCurrent(agent, version) {
         createVersionedAlias(agent, version);
         return 'created';
     }
-    if (!isVersionedAliasCurrent(agent, version)) {
+    // Upgrade-only (newest-wins), same rationale as ensureShimCurrent: never
+    // downgrade an alias stamped by a newer install sharing the shims dir.
+    const onDisk = readVersionedAliasSchemaVersion(agent, version);
+    if (onDisk === null || onDisk < VERSIONED_ALIAS_SCHEMA_VERSION) {
         createVersionedAlias(agent, version);
         return 'updated';
     }
@@ -1278,7 +1281,14 @@ export function ensureShimCurrent(agent) {
         createShim(agent);
         return 'created';
     }
-    if (!isShimCurrent(agent)) {
+    // Upgrade-only (newest-wins): regenerate only when the on-disk shim is
+    // unversioned/unreadable (null) or OLDER than this binary. Never downgrade a
+    // shim stamped by a NEWER agents-cli install. Two installs at different
+    // SHIM_SCHEMA_VERSION sharing ~/.agents/.cache/shims/ (e.g. a dev build on
+    // PATH alongside a Hermes-bundled published copy) otherwise ping-pong —
+    // rewriting every shim on each alternating launch and adding boot latency.
+    const onDisk = readShimSchemaVersion(agent);
+    if (onDisk === null || onDisk < SHIM_SCHEMA_VERSION) {
         createShim(agent);
         return 'updated';
     }

package/dist/lib/state.d.ts

@@ -247,6 +247,24 @@ export declare function recordVersionResources(_agent: AgentId, _version: string
  * Pass all resource types you want to initialize in one call to batch the write.
  */
 export declare function ensureVersionResourcePatterns(agent: AgentId, version: string, updates: Partial<Record<Exclude<keyof VersionResources, 'rulesPreset'>, ResourcePattern[]>>): void;
+/**
+ * Insert `<alias>:*` at the canonical position (after the system/user/other-extra
+ * includes, before `project:*`), unless the alias is already referenced — as an
+ * include (`alias:...`) or an exclude (`!alias:...`). Returns a new array when it
+ * changes, otherwise the same reference (so callers can detect no-ops cheaply).
+ */
+export declare function withAlias(list: ResourcePattern[], alias: string): ResourcePattern[];
+/** Strip every reference to `<alias>:...` / `!<alias>:...` from a selector list. */
+export declare function withoutAlias(list: ResourcePattern[], alias: string): ResourcePattern[];
+/**
+ * Backfill (add=true) or strip (add=false) an extra-repo alias across every
+ * already-installed version's selectors. New versions get the alias via
+ * `defaultPatterns()` at scaffold time; this keeps existing versions in sync
+ * when an extra repo is registered/enabled or removed. Only touches selector
+ * lists that are already set — an unset list is left for `defaultPatterns()`.
+ * Returns the number of (agent, version) pairs changed.
+ */
+export declare function applyExtraAliasToVersions(alias: string, add: boolean): number;
 export declare function getVersionResources(agent: AgentId, version: string): VersionResources | null;
 /** Active rules preset for an agent@version. Defaults to "default" when unset. */
 export declare function getActiveRulesPreset(agent: AgentId, version: string): string;

package/dist/lib/state.js

@@ -711,6 +711,79 @@ export function ensureVersionResourcePatterns(agent, version, updates) {
     if (changed)
         writeMeta(meta);
 }
+/**
+ * Resource types that resolve across the extra-repo layer. Mirrors
+ * `defaultPatterns()`: extras feed commands/skills/hooks/subagents/plugins/
+ * workflows, but never permissions (`system:*`) or mcp (`user:*`).
+ */
+const EXTRA_ELIGIBLE_TYPES = [
+    'commands', 'skills', 'hooks', 'subagents', 'plugins', 'workflows',
+];
+/**
+ * Insert `<alias>:*` at the canonical position (after the system/user/other-extra
+ * includes, before `project:*`), unless the alias is already referenced — as an
+ * include (`alias:...`) or an exclude (`!alias:...`). Returns a new array when it
+ * changes, otherwise the same reference (so callers can detect no-ops cheaply).
+ */
+export function withAlias(list, alias) {
+    const prefix = `${alias}:`;
+    if (list.some(p => p === `${alias}:*` || p.startsWith(prefix) || p.startsWith(`!${prefix}`))) {
+        return list;
+    }
+    const next = [...list];
+    const projIdx = next.findIndex(p => p === 'project:*' || p.startsWith('project:'));
+    if (projIdx >= 0)
+        next.splice(projIdx, 0, `${alias}:*`);
+    else
+        next.push(`${alias}:*`);
+    return next;
+}
+/** Strip every reference to `<alias>:...` / `!<alias>:...` from a selector list. */
+export function withoutAlias(list, alias) {
+    const prefix = `${alias}:`;
+    const next = list.filter(p => !(p.startsWith(prefix) || p.startsWith(`!${prefix}`)));
+    return next.length === list.length ? list : next;
+}
+/**
+ * Backfill (add=true) or strip (add=false) an extra-repo alias across every
+ * already-installed version's selectors. New versions get the alias via
+ * `defaultPatterns()` at scaffold time; this keeps existing versions in sync
+ * when an extra repo is registered/enabled or removed. Only touches selector
+ * lists that are already set — an unset list is left for `defaultPatterns()`.
+ * Returns the number of (agent, version) pairs changed.
+ */
+export function applyExtraAliasToVersions(alias, add) {
+    const meta = readMeta();
+    if (!meta.versions)
+        return 0;
+    let changed = false;
+    let count = 0;
+    for (const versions of Object.values(meta.versions)) {
+        if (!versions)
+            continue;
+        for (const vr of Object.values(versions)) {
+            if (!vr)
+                continue;
+            let touched = false;
+            for (const type of EXTRA_ELIGIBLE_TYPES) {
+                const cur = vr[type];
+                if (!Array.isArray(cur) || cur.length === 0)
+                    continue;
+                const next = add ? withAlias(cur, alias) : withoutAlias(cur, alias);
+                if (next !== cur) {
+                    vr[type] = next;
+                    touched = true;
+                    changed = true;
+                }
+            }
+            if (touched)
+                count++;
+        }
+    }
+    if (changed)
+        writeMeta(meta);
+    return count;
+}
 export function getVersionResources(agent, version) {
     const meta = readMeta();
     return meta.versions?.[agent]?.[version] || null;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@phnx-labs/agents-cli",
-  "version": "1.20.14",
+  "version": "1.20.15",
   "description": "One CLI for all your AI coding agents - versions, config, cloud dispatch, sessions, and teams (now with first-class Grok Build CLI support)",
   "type": "module",
   "main": "dist/index.js",