Rephrase agent advisory and gate by CLI version

[codyde]

Summary

The previous agent advisory was flagged as prompt-injection by Claude and other agents that scan for directive framing. Users reported the warning firing on roughly every other Railway command during agent sessions.

Two changes:

1. Rephrase to neutral status

Before:

IMPORTANT: Railway agent tooling not detected.

Ask the user if they would like this agent to run `railway setup agent -y`
to configure the Railway agent tooling (agent skills and MCP configurations).

Your agent will work much more effectively in Railway with these installed.

After:

Railway agent tooling (skills + MCP) isn't installed.
Run `railway setup agent` to configure it.

• No "ask the user," no "this agent" framing — that combination is the textbook prompt-injection pattern.
• Drops -y from the suggested command so the user stays in the loop on the install.

2. Gate by CLI version instead of 24h timer

The advisory now fires once per installed CLI version, instead of once per 24h per command. Upgrading the CLI re-arms it exactly once. This eliminates the "fired again because you used a different subcommand" surprise.

State file changes

~/.railway/agent-state.json gains advisory.lastShownCliVersion. The old per-command advisories map is dropped from the schema:

{
  "setup": { ... },
  "advisory": {
    "lastShownCliVersion": "4.62.0",
    "lastShownAt": "2026-05-26T..."
  }
}

Existing state files deserialize cleanly (extra fields ignored). Users on the old schema will see the new advisory at most one more time after upgrading.

Behavior matrix

State	Pre	Post
First run, agent env, setup not done	shown	shown
Same CLI version, next command	suppressed for 24h, then shown	suppressed
25h later, same CLI version	shown again	suppressed
After CLI upgrade	shown again	shown once
After railway setup agent	suppressed permanently	suppressed permanently
RAILWAY_AGENT_ADVISORY=0	suppressed	suppressed

Test plan

• Fresh agent env (e.g. CLAUDECODE=1), no ~/.railway/agent-state.json: advisory shows, state file written with lastShownCliVersion matching cargo pkgid.
• Re-run same command at same CLI version: advisory suppressed.
• Bump version, re-run: advisory shows again, state updated.
• RAILWAY_AGENT_ADVISORY=0: suppressed regardless of state.
• railway setup agent then any other command: suppressed regardless of state.
• Old state file with advisories: { "up": { ... } } still loads and the new advisory shows at most once.

🤖 Generated with Claude Code