@integrity-labs/agt-cli 0.10.0 → 0.10.2

package/dist/{chunk-2TSCVXHE.js → chunk-QU7FBXH3.js}

@@ -30,7 +30,9 @@ function computeNextFire(kind, expr, every, at, timezone, afterMs) {
   }
   if (kind === "at" && at) {
     const ts = new Date(at).getTime();
-    return isNaN(ts) ? null : ts;
+    if (isNaN(ts)) return null;
+    if (afterMs && ts <= afterMs) return null;
+    return ts;
   }
   return null;
 }
@@ -190,4 +192,4 @@ export {
   findTaskByTemplate,
   getProjectDir
 };
-//# sourceMappingURL=chunk-2TSCVXHE.js.map
+//# sourceMappingURL=chunk-QU7FBXH3.js.map

package/dist/chunk-QU7FBXH3.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/lib/claude-scheduler.ts"],"sourcesContent":["/**\n * In-process scheduler for Claude Code agents.\n *\n * On each manager poll cycle, checks if any tasks are due and fires them\n * via `claude -p`. State persists to disk so nextFireAt/lastFireAt survive\n * manager restarts.\n */\n\nimport { existsSync, mkdirSync, readFileSync, renameSync, writeFileSync } from 'node:fs';\nimport { join } from 'node:path';\nimport { homedir } from 'node:os';\nimport { Cron } from 'croner';\n\n// ---------------------------------------------------------------------------\n// Types\n// ---------------------------------------------------------------------------\n\nexport interface SchedulerTaskState {\n  taskId: string;\n  templateId: string;\n  name: string;\n  agentCodeName: string;\n  agentId: string;\n  scheduleKind: 'cron' | 'every' | 'at';\n  scheduleExpr: string | null;\n  scheduleEvery: string | null;\n  scheduleAt: string | null;\n  timezone: string;\n  prompt: string;\n  sessionTarget: string;\n  deliveryMode: string;\n  deliveryChannel: string | null;\n  deliveryTo: string | null;\n  enabled: boolean;\n  triggeredAt: number | null; // epoch ms — manual trigger from webapp\n  nextFireAt: number | null; // epoch ms, null = completed one-shot\n  lastFireAt: number | null;\n  lastStatus: 'ok' | 'error' | null;\n  firedCount: number;\n}\n\nexport interface SchedulerState {\n  version: 1;\n  tasks: Record<string, SchedulerTaskState>;\n  updatedAt: string;\n}\n\nexport interface SchedulerTaskInput {\n  id: string;\n  template_id: string;\n  name: string;\n  schedule_kind: 'cron' | 'every' | 'at';\n  schedule_expr: string | null;\n  schedule_every: string | null;\n  schedule_at: string | null;\n  timezone: string;\n  prompt: string;\n  session_target: string;\n  delivery_mode: string;\n  delivery_channel: string | null;\n  delivery_to: string | null;\n  enabled: boolean;\n  triggered_at?: string | null;\n}\n\n// ---------------------------------------------------------------------------\n// Interval parsing (reused from Claude Code adapter)\n// ---------------------------------------------------------------------------\n\nfunction parseIntervalMs(scheduleEvery: string | null): number {\n  if (!scheduleEvery) return 60 * 60_000; // 1hr default\n  const match = scheduleEvery.match(/^(\\d+)\\s*(m|min|h|hr|d)$/i);\n  if (!match) return 60 * 60_000;\n  const value = parseInt(match[1]!, 10);\n  const unit = match[2]!.toLowerCase();\n  if (unit === 'h' || unit === 'hr') return value * 60 * 60_000;\n  if (unit === 'd') return value * 24 * 60 * 60_000;\n  return value * 60_000; // minutes\n}\n\n// ---------------------------------------------------------------------------\n// Next-fire computation\n// ---------------------------------------------------------------------------\n\nexport function computeNextFire(\n  kind: 'cron' | 'every' | 'at',\n  expr: string | null,\n  every: string | null,\n  at: string | null,\n  timezone: string,\n  afterMs?: number,\n): number | null {\n  const now = afterMs ?? Date.now();\n\n  if (kind === 'cron' && expr) {\n    try {\n      const cron = new Cron(expr, { timezone: timezone || undefined });\n      const next = cron.nextRun(new Date(now));\n      return next ? next.getTime() : null;\n    } catch {\n      return null;\n    }\n  }\n\n  if (kind === 'every') {\n    const intervalMs = parseIntervalMs(every);\n    return now + intervalMs;\n  }\n\n  if (kind === 'at' && at) {\n    const ts = new Date(at).getTime();\n    if (isNaN(ts)) return null;\n    // If the 'at' timestamp is in the past and afterMs is set (meaning we already\n    // fired), return null to prevent re-firing on state rebuild.\n    if (afterMs && ts <= afterMs) return null;\n    return ts;\n  }\n\n  return null;\n}\n\n// ---------------------------------------------------------------------------\n// State persistence\n// ---------------------------------------------------------------------------\n\nfunction getStateDir(codeName: string): string {\n  return join(homedir(), '.augmented', codeName, 'claudecode');\n}\n\nfunction getStatePath(codeName: string): string {\n  return join(getStateDir(codeName), 'scheduler-state.json');\n}\n\nexport function loadSchedulerState(codeName: string): SchedulerState {\n  const path = getStatePath(codeName);\n  if (existsSync(path)) {\n    try {\n      return JSON.parse(readFileSync(path, 'utf-8'));\n    } catch { /* corrupted — start fresh */ }\n  }\n  return { version: 1, tasks: {}, updatedAt: new Date().toISOString() };\n}\n\nexport function saveSchedulerState(codeName: string, state: SchedulerState): void {\n  const dir = getStateDir(codeName);\n  mkdirSync(dir, { recursive: true });\n  state.updatedAt = new Date().toISOString();\n  const path = getStatePath(codeName);\n  const tmpPath = path + '.tmp';\n  writeFileSync(tmpPath, JSON.stringify(state, null, 2));\n  renameSync(tmpPath, path);\n}\n\n// ---------------------------------------------------------------------------\n// Sync API tasks → scheduler state\n// ---------------------------------------------------------------------------\n\nexport function syncTasksToScheduler(\n  codeName: string,\n  agentId: string,\n  tasks: SchedulerTaskInput[],\n): SchedulerState {\n  const state = loadSchedulerState(codeName);\n  const desiredIds = new Set(tasks.map((t) => t.id));\n\n  // Remove tasks no longer in API\n  for (const id of Object.keys(state.tasks)) {\n    if (!desiredIds.has(id)) {\n      delete state.tasks[id];\n    }\n  }\n\n  // Add or update tasks\n  for (const t of tasks) {\n    const existing = state.tasks[t.id];\n    if (existing) {\n      // Only recompute nextFireAt if the schedule definition actually changed.\n      // Without this guard, every sync cycle resets nextFireAt from \"now\",\n      // preventing past-due tasks from ever being detected as ready.\n      const scheduleChanged =\n        existing.scheduleKind !== t.schedule_kind ||\n        existing.scheduleExpr !== t.schedule_expr ||\n        existing.scheduleEvery !== t.schedule_every ||\n        existing.scheduleAt !== t.schedule_at ||\n        existing.timezone !== t.timezone;\n\n      // Update mutable fields, preserve fire history\n      existing.name = t.name;\n      existing.templateId = t.template_id;\n      existing.scheduleKind = t.schedule_kind;\n      existing.scheduleExpr = t.schedule_expr;\n      existing.scheduleEvery = t.schedule_every;\n      existing.scheduleAt = t.schedule_at;\n      existing.timezone = t.timezone;\n      existing.prompt = t.prompt;\n      existing.sessionTarget = t.session_target;\n      existing.deliveryMode = t.delivery_mode;\n      existing.deliveryChannel = t.delivery_channel;\n      existing.deliveryTo = t.delivery_to;\n      existing.enabled = t.enabled;\n      if (t.triggered_at) existing.triggeredAt = new Date(t.triggered_at).getTime();\n      if (scheduleChanged) {\n        existing.nextFireAt = computeNextFire(\n          t.schedule_kind, t.schedule_expr, t.schedule_every, t.schedule_at,\n          t.timezone, existing.lastFireAt ?? undefined,\n        );\n      }\n    } else {\n      // New task\n      state.tasks[t.id] = {\n        taskId: t.id,\n        templateId: t.template_id,\n        name: t.name,\n        agentCodeName: codeName,\n        agentId,\n        scheduleKind: t.schedule_kind,\n        scheduleExpr: t.schedule_expr,\n        scheduleEvery: t.schedule_every,\n        scheduleAt: t.schedule_at,\n        timezone: t.timezone,\n        prompt: t.prompt,\n        sessionTarget: t.session_target,\n        deliveryMode: t.delivery_mode,\n        deliveryChannel: t.delivery_channel,\n        deliveryTo: t.delivery_to,\n        enabled: t.enabled,\n        triggeredAt: t.triggered_at ? new Date(t.triggered_at).getTime() : null,\n        nextFireAt: computeNextFire(\n          t.schedule_kind, t.schedule_expr, t.schedule_every, t.schedule_at, t.timezone,\n        ),\n        lastFireAt: null,\n        lastStatus: null,\n        firedCount: 0,\n      };\n    }\n  }\n\n  saveSchedulerState(codeName, state);\n  return state;\n}\n\n// ---------------------------------------------------------------------------\n// Ready-task detection\n// ---------------------------------------------------------------------------\n\nexport function getReadyTasks(state: SchedulerState): SchedulerTaskState[] {\n  const now = Date.now();\n  const ready = Object.values(state.tasks).filter((t) => {\n    if (!t.enabled) return false;\n    // Manual trigger: triggered_at is set and hasn't been fired yet\n    if (t.triggeredAt) {\n      const triggerReady = !t.lastFireAt || t.triggeredAt > t.lastFireAt;\n      if (!triggerReady) {\n        // Debug: trigger was already consumed\n      }\n      if (triggerReady) return true;\n    }\n    // Normal schedule\n    return t.nextFireAt !== null && t.nextFireAt <= now;\n  });\n  // Deduplicate by templateId — only fire one task per template per cycle\n  const seen = new Set<string>();\n  return ready.filter((t) => {\n    if (seen.has(t.templateId)) return false;\n    seen.add(t.templateId);\n    return true;\n  });\n}\n\n// ---------------------------------------------------------------------------\n// Post-execution state update\n// ---------------------------------------------------------------------------\n\nexport function markTaskFired(\n  codeName: string,\n  taskId: string,\n  status: 'ok' | 'error',\n): SchedulerState {\n  const state = loadSchedulerState(codeName);\n  const task = state.tasks[taskId];\n  if (!task) return state;\n\n  task.lastFireAt = Date.now();\n  task.lastStatus = status;\n  task.firedCount++;\n\n  // Compute next fire\n  if (task.scheduleKind === 'at') {\n    // One-shot — mark as completed\n    task.nextFireAt = null;\n  } else {\n    task.nextFireAt = computeNextFire(\n      task.scheduleKind, task.scheduleExpr, task.scheduleEvery, task.scheduleAt,\n      task.timezone, task.lastFireAt,\n    );\n  }\n\n  saveSchedulerState(codeName, state);\n  return state;\n}\n\n// ---------------------------------------------------------------------------\n// Find a task by template ID (for work triggers)\n// ---------------------------------------------------------------------------\n\nexport function findTaskByTemplate(state: SchedulerState, templateId: string): SchedulerTaskState | undefined {\n  return Object.values(state.tasks).find(\n    (t) => t.templateId === templateId && t.enabled,\n  );\n}\n\nexport function getProjectDir(codeName: string): string {\n  return join(homedir(), '.augmented', codeName, 'project');\n}\n"],"mappings":";AAQA,SAAS,YAAY,WAAW,cAAc,YAAY,qBAAqB;AAC/E,SAAS,YAAY;AACrB,SAAS,eAAe;AACxB,SAAS,YAAY;AA0DrB,SAAS,gBAAgB,eAAsC;AAC7D,MAAI,CAAC,cAAe,QAAO,KAAK;AAChC,QAAM,QAAQ,cAAc,MAAM,2BAA2B;AAC7D,MAAI,CAAC,MAAO,QAAO,KAAK;AACxB,QAAM,QAAQ,SAAS,MAAM,CAAC,GAAI,EAAE;AACpC,QAAM,OAAO,MAAM,CAAC,EAAG,YAAY;AACnC,MAAI,SAAS,OAAO,SAAS,KAAM,QAAO,QAAQ,KAAK;AACvD,MAAI,SAAS,IAAK,QAAO,QAAQ,KAAK,KAAK;AAC3C,SAAO,QAAQ;AACjB;AAMO,SAAS,gBACd,MACA,MACA,OACA,IACA,UACA,SACe;AACf,QAAM,MAAM,WAAW,KAAK,IAAI;AAEhC,MAAI,SAAS,UAAU,MAAM;AAC3B,QAAI;AACF,YAAM,OAAO,IAAI,KAAK,MAAM,EAAE,UAAU,YAAY,OAAU,CAAC;AAC/D,YAAM,OAAO,KAAK,QAAQ,IAAI,KAAK,GAAG,CAAC;AACvC,aAAO,OAAO,KAAK,QAAQ,IAAI;AAAA,IACjC,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF;AAEA,MAAI,SAAS,SAAS;AACpB,UAAM,aAAa,gBAAgB,KAAK;AACxC,WAAO,MAAM;AAAA,EACf;AAEA,MAAI,SAAS,QAAQ,IAAI;AACvB,UAAM,KAAK,IAAI,KAAK,EAAE,EAAE,QAAQ;AAChC,QAAI,MAAM,EAAE,EAAG,QAAO;AAGtB,QAAI,WAAW,MAAM,QAAS,QAAO;AACrC,WAAO;AAAA,EACT;AAEA,SAAO;AACT;AAMA,SAAS,YAAY,UAA0B;AAC7C,SAAO,KAAK,QAAQ,GAAG,cAAc,UAAU,YAAY;AAC7D;AAEA,SAAS,aAAa,UAA0B;AAC9C,SAAO,KAAK,YAAY,QAAQ,GAAG,sBAAsB;AAC3D;AAEO,SAAS,mBAAmB,UAAkC;AACnE,QAAM,OAAO,aAAa,QAAQ;AAClC,MAAI,WAAW,IAAI,GAAG;AACpB,QAAI;AACF,aAAO,KAAK,MAAM,aAAa,MAAM,OAAO,CAAC;AAAA,IAC/C,QAAQ;AAAA,IAAgC;AAAA,EAC1C;AACA,SAAO,EAAE,SAAS,GAAG,OAAO,CAAC,GAAG,YAAW,oBAAI,KAAK,GAAE,YAAY,EAAE;AACtE;AAEO,SAAS,mBAAmB,UAAkB,OAA6B;AAChF,QAAM,MAAM,YAAY,QAAQ;AAChC,YAAU,KAAK,EAAE,WAAW,KAAK,CAAC;AAClC,QAAM,aAAY,oBAAI,KAAK,GAAE,YAAY;AACzC,QAAM,OAAO,aAAa,QAAQ;AAClC,QAAM,UAAU,OAAO;AACvB,gBAAc,SAAS,KAAK,UAAU,OAAO,MAAM,CAAC,CAAC;AACrD,aAAW,SAAS,IAAI;AAC1B;AAMO,SAAS,qBACd,UACA,SACA,OACgB;AAChB,QAAM,QAAQ,mBAAmB,QAAQ;AACzC,QAAM,aAAa,IAAI,IAAI,MAAM,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;AAGjD,aAAW,MAAM,OAAO,KAAK,MAAM,KAAK,GAAG;AACzC,QAAI,CAAC,WAAW,IAAI,EAAE,GAAG;AACvB,aAAO,MAAM,MAAM,EAAE;AAAA,IACvB;AAAA,EACF;AAGA,aAAW,KAAK,OAAO;AACrB,UAAM,WAAW,MAAM,MAAM,EAAE,EAAE;AACjC,QAAI,UAAU;AAIZ,YAAM,kBACJ,SAAS,iBAAiB,EAAE,iBAC5B,SAAS,iBAAiB,EAAE,iBAC5B,SAAS,kBAAkB,EAAE,kBAC7B,SAAS,eAAe,EAAE,eAC1B,SAAS,aAAa,EAAE;AAG1B,eAAS,OAAO,EAAE;AAClB,eAAS,aAAa,EAAE;AACxB,eAAS,eAAe,EAAE;AAC1B,eAAS,eAAe,EAAE;AAC1B,eAAS,gBAAgB,EAAE;AAC3B,eAAS,aAAa,EAAE;AACxB,eAAS,WAAW,EAAE;AACtB,eAAS,SAAS,EAAE;AACpB,eAAS,gBAAgB,EAAE;AAC3B,eAAS,eAAe,EAAE;AAC1B,eAAS,kBAAkB,EAAE;AAC7B,eAAS,aAAa,EAAE;AACxB,eAAS,UAAU,EAAE;AACrB,UAAI,EAAE,aAAc,UAAS,cAAc,IAAI,KAAK,EAAE,YAAY,EAAE,QAAQ;AAC5E,UAAI,iBAAiB;AACnB,iBAAS,aAAa;AAAA,UACpB,EAAE;AAAA,UAAe,EAAE;AAAA,UAAe,EAAE;AAAA,UAAgB,EAAE;AAAA,UACtD,EAAE;AAAA,UAAU,SAAS,cAAc;AAAA,QACrC;AAAA,MACF;AAAA,IACF,OAAO;AAEL,YAAM,MAAM,EAAE,EAAE,IAAI;AAAA,QAClB,QAAQ,EAAE;AAAA,QACV,YAAY,EAAE;AAAA,QACd,MAAM,EAAE;AAAA,QACR,eAAe;AAAA,QACf;AAAA,QACA,cAAc,EAAE;AAAA,QAChB,cAAc,EAAE;AAAA,QAChB,eAAe,EAAE;AAAA,QACjB,YAAY,EAAE;AAAA,QACd,UAAU,EAAE;AAAA,QACZ,QAAQ,EAAE;AAAA,QACV,eAAe,EAAE;AAAA,QACjB,cAAc,EAAE;AAAA,QAChB,iBAAiB,EAAE;AAAA,QACnB,YAAY,EAAE;AAAA,QACd,SAAS,EAAE;AAAA,QACX,aAAa,EAAE,eAAe,IAAI,KAAK,EAAE,YAAY,EAAE,QAAQ,IAAI;AAAA,QACnE,YAAY;AAAA,UACV,EAAE;AAAA,UAAe,EAAE;AAAA,UAAe,EAAE;AAAA,UAAgB,EAAE;AAAA,UAAa,EAAE;AAAA,QACvE;AAAA,QACA,YAAY;AAAA,QACZ,YAAY;AAAA,QACZ,YAAY;AAAA,MACd;AAAA,IACF;AAAA,EACF;AAEA,qBAAmB,UAAU,KAAK;AAClC,SAAO;AACT;AAMO,SAAS,cAAc,OAA6C;AACzE,QAAM,MAAM,KAAK,IAAI;AACrB,QAAM,QAAQ,OAAO,OAAO,MAAM,KAAK,EAAE,OAAO,CAAC,MAAM;AACrD,QAAI,CAAC,EAAE,QAAS,QAAO;AAEvB,QAAI,EAAE,aAAa;AACjB,YAAM,eAAe,CAAC,EAAE,cAAc,EAAE,cAAc,EAAE;AACxD,UAAI,CAAC,cAAc;AAAA,MAEnB;AACA,UAAI,aAAc,QAAO;AAAA,IAC3B;AAEA,WAAO,EAAE,eAAe,QAAQ,EAAE,cAAc;AAAA,EAClD,CAAC;AAED,QAAM,OAAO,oBAAI,IAAY;AAC7B,SAAO,MAAM,OAAO,CAAC,MAAM;AACzB,QAAI,KAAK,IAAI,EAAE,UAAU,EAAG,QAAO;AACnC,SAAK,IAAI,EAAE,UAAU;AACrB,WAAO;AAAA,EACT,CAAC;AACH;AAMO,SAAS,cACd,UACA,QACA,QACgB;AAChB,QAAM,QAAQ,mBAAmB,QAAQ;AACzC,QAAM,OAAO,MAAM,MAAM,MAAM;AAC/B,MAAI,CAAC,KAAM,QAAO;AAElB,OAAK,aAAa,KAAK,IAAI;AAC3B,OAAK,aAAa;AAClB,OAAK;AAGL,MAAI,KAAK,iBAAiB,MAAM;AAE9B,SAAK,aAAa;AAAA,EACpB,OAAO;AACL,SAAK,aAAa;AAAA,MAChB,KAAK;AAAA,MAAc,KAAK;AAAA,MAAc,KAAK;AAAA,MAAe,KAAK;AAAA,MAC/D,KAAK;AAAA,MAAU,KAAK;AAAA,IACtB;AAAA,EACF;AAEA,qBAAmB,UAAU,KAAK;AAClC,SAAO;AACT;AAMO,SAAS,mBAAmB,OAAuB,YAAoD;AAC5G,SAAO,OAAO,OAAO,MAAM,KAAK,EAAE;AAAA,IAChC,CAAC,MAAM,EAAE,eAAe,cAAc,EAAE;AAAA,EAC1C;AACF;AAEO,SAAS,cAAc,UAA0B;AACtD,SAAO,KAAK,QAAQ,GAAG,cAAc,UAAU,SAAS;AAC1D;","names":[]}

package/dist/{chunk-UWH2MMKY.js → chunk-VCKY6MN2.js}

@@ -215,6 +215,25 @@ var INTEGRATION_REGISTRY = [
     },
     docs_url: "https://github.com/Pika-Labs/Pika-Skills"
   },
+  {
+    id: "claude-code",
+    name: "Claude Code",
+    category: "code",
+    description: "Claude Code AI agent runtime \u2014 code editing, task execution, file management, and development workflows",
+    supported_auth_types: ["api_key", "none"],
+    capabilities: [
+      { id: "claude-code:edit-code", name: "Edit Code", description: "Read, write, and edit source files", access: "write" },
+      { id: "claude-code:run-tasks", name: "Run Tasks", description: "Execute bash commands and development tasks", access: "write" },
+      { id: "claude-code:search", name: "Search Code", description: "Search files and grep codebase", access: "read" },
+      { id: "claude-code:git", name: "Git Operations", description: "Commit, branch, push, and manage version control", access: "write" }
+    ],
+    cli_tool: {
+      package: "@anthropic-ai/claude-code",
+      binary: "claude",
+      env_key: "ANTHROPIC_API_KEY"
+    },
+    docs_url: "https://docs.anthropic.com/en/docs/claude-code"
+  },
   {
     id: "custom",
     name: "Custom Integration",
@@ -464,12 +483,30 @@ you need context about who you work for or how to operate.
 
 ${body}`;
 }
+function buildReportsToSection(reportsTo) {
+  if (!reportsTo)
+    return "";
+  const typeLabel = reportsTo.type === "agent" ? "Agent" : "Person";
+  let section = `
+## Reports To
+
+- **${reportsTo.name}** (${typeLabel})`;
+  if (reportsTo.title)
+    section += `
+- Title: ${reportsTo.title}`;
+  if (reportsTo.description)
+    section += `
+- ${reportsTo.description}`;
+  section += "\n";
+  return section;
+}
 function generateSoulMd(input) {
-  const { frontmatter, role, description, resolvedChannels, team, knowledge } = input;
+  const { frontmatter, role, description, resolvedChannels, team, knowledge, reportsTo } = input;
   const channelList = resolvedChannels?.length ? resolvedChannels.join(", ") : "none";
   const roleDisplay = role ?? "Agent";
   const desc = description?.trim();
   const knowledgeSection = buildKnowledgeSection(knowledge);
+  const reportsToSection = buildReportsToSection(reportsTo);
   return `# ${frontmatter.display_name}
 
 You are **${frontmatter.display_name}**, **${roleDisplay}**${team ? ` at **${team.name}**` : ""}.
@@ -479,7 +516,7 @@ ${desc}
 - Owner: ${frontmatter.owner.name}
 - Environment: ${frontmatter.environment}
 - Channels: ${channelList}
-${knowledgeSection}`;
+${reportsToSection}${knowledgeSection}`;
 }
 function generateAgentsMd(input) {
   const { frontmatter, role, description, team } = input;
@@ -688,7 +725,8 @@ var openclawAdapter = {
       description: input.agent.description,
       resolvedChannels: input.resolvedChannels,
       team: input.team,
-      knowledge: knowledgeRefs.length > 0 ? knowledgeRefs : void 0
+      knowledge: knowledgeRefs.length > 0 ? knowledgeRefs : void 0,
+      reportsTo: input.reportsTo
     };
     const artifacts = [
       { relativePath: "openclaw.json5", content: serializeOpenClawConfig(config) },
@@ -1314,6 +1352,38 @@ ${entry.content}`
       return changed;
     }, codeName);
   },
+  executePluginHook(ctx) {
+    const agentDir = join(AUGMENTED_DIR, ctx.codeName);
+    const projectDir = join(agentDir, "project");
+    mkdirSync(agentDir, { recursive: true });
+    const startedAt = Date.now();
+    return new Promise((resolve3) => {
+      const child = execFile("bash", ["-c", ctx.script], {
+        cwd: agentDir,
+        timeout: 6e4,
+        maxBuffer: 1024 * 1024,
+        env: {
+          ...process.env,
+          AGENT_CODE_NAME: ctx.codeName,
+          AGENT_DIR: agentDir,
+          AGENT_PROJECT_DIR: projectDir,
+          AGENT_FRAMEWORK: "openclaw"
+        }
+      }, (error, stdout, stderr) => {
+        const durationMs = Date.now() - startedAt;
+        const timedOut = !!error && error.code === "ETIMEDOUT";
+        resolve3({
+          exitCode: error ? typeof error.code === "number" ? error.code : 1 : 0,
+          stdout: stdout?.toString() ?? "",
+          stderr: stderr?.toString() ?? "",
+          durationMs,
+          timedOut
+        });
+      });
+      child.on("error", () => {
+      });
+    });
+  },
   readGatewayToken(codeName) {
     const homeDir = getHomeDir();
     try {
@@ -1792,6 +1862,7 @@ registerFramework(nemoClawAdapter);
 import { readFileSync as readFileSync3, writeFileSync as writeFileSync3, mkdirSync as mkdirSync3, existsSync as existsSync3, chmodSync as chmodSync3 } from "fs";
 import { join as join3, relative } from "path";
 import { homedir as homedir2 } from "os";
+import { execFile as execFile3 } from "child_process";
 
 // ../../packages/core/dist/provisioning/frameworks/claudecode/identity.js
 function buildMemorySection(hasQmd) {
@@ -1916,8 +1987,29 @@ ${seed.trim()}
 
 `;
 }
+function buildReportsToSection2(reportsTo) {
+  if (!reportsTo)
+    return "";
+  const typeLabel = reportsTo.type === "agent" ? "Agent" : "Person";
+  let section = `## Reports To
+
+- **${reportsTo.name}** (${typeLabel})`;
+  if (reportsTo.title)
+    section += `
+- Title: ${reportsTo.title}`;
+  if (reportsTo.description)
+    section += `
+- ${reportsTo.description}`;
+  section += `
+
+Escalate blockers, questions, and important decisions to your manager.
+When your manager sends you a message, prioritize it.
+
+`;
+  return section;
+}
 function generateClaudeMd(input) {
-  const { frontmatter, role, description, resolvedChannels, team, consoleUrl, hasQmd, integrations, knowledge, timezone, personalitySeed } = input;
+  const { frontmatter, role, description, resolvedChannels, team, consoleUrl, hasQmd, integrations, knowledge, timezone, reportsTo, personalitySeed } = input;
   const channelList = resolvedChannels?.length ? resolvedChannels.join(", ") : "none";
   const roleDisplay = role ?? "Agent";
   const desc = description?.trim();
@@ -1926,6 +2018,7 @@ function generateClaudeMd(input) {
   const integrationsSection = buildIntegrationsSection(integrations);
   const knowledgeSection = buildKnowledgeSection2(knowledge);
   const personalitySection = buildPersonalitySection(personalitySeed);
+  const reportsToSection = buildReportsToSection2(reportsTo);
   return `# ${frontmatter.display_name}
 
 You are **${frontmatter.display_name}**, **${roleDisplay}**${team ? ` at **${team.name}**` : ""}.
@@ -1981,7 +2074,7 @@ first to load your recent board state. This gives you context about completed an
 in-progress items so you can answer accurately.
 
 ${memorySection}
-${integrationsSection}${knowledgeSection}## Development Workflow
+${reportsToSection}${integrationsSection}${knowledgeSection}## Development Workflow
 
 ### Repository Management
 
@@ -2149,6 +2242,88 @@ function provisionStopHook(codeName) {
   settings["hooks"] = hooks;
   writeFileSync3(settingsPath, JSON.stringify(settings, null, 2));
 }
+function provisionIsolationHook(codeName) {
+  const projectDir = getProjectDir(codeName);
+  const claudeDir = join3(projectDir, ".claude");
+  mkdirSync3(claudeDir, { recursive: true });
+  const homeDir = getHomeDir3();
+  const augmentedBase = join3(homeDir, ".augmented");
+  const ownAgentDir = join3(augmentedBase, codeName);
+  const logFile = join3(ownAgentDir, "isolation.log");
+  const hookScriptPath = join3(claudeDir, "agt-isolation-hook.sh");
+  const hookScript = [
+    "#!/bin/bash",
+    "# Auto-generated by Augmented \u2014 prevents cross-agent file access.",
+    "# Exit 0 = allow, Exit 2 = block (with stderr message shown to agent)",
+    "set -euo pipefail",
+    "INPUT=$(cat)",
+    `TOOL=$(echo "$INPUT" | jq -r '.tool_name // empty')`,
+    "",
+    "# Only check file-access tools",
+    'case "$TOOL" in',
+    "  Read|Edit|Write|Glob|Grep|MultiEdit) ;;",
+    "  Bash)",
+    "    # For Bash, we can't reliably parse arbitrary commands \u2014 rely on allowedDirectories.",
+    "    # But block obvious attempts to read other agent dirs.",
+    `    CMD=$(echo "$INPUT" | jq -r '.tool_input.command // empty')`,
+    `    if echo "$CMD" | grep -qE '${augmentedBase}/[^/]+/' 2>/dev/null; then`,
+    `      MATCH=$(echo "$CMD" | grep -oE '${augmentedBase}/[^/]+' | head -1)`,
+    `      AGENT_DIR=$(basename "$MATCH")`,
+    `      if [ "$AGENT_DIR" != "${codeName}" ] && [ "$AGENT_DIR" != "_mcp" ]; then`,
+    `        echo "$(date -u +%Y-%m-%dT%H:%M:%SZ) BLOCKED bash targeting $MATCH" >> "${logFile}"`,
+    `        echo "Access denied: you cannot access other agents' directories." >&2`,
+    "        exit 2",
+    "      fi",
+    "    fi",
+    "    exit 0 ;;",
+    "  *) exit 0 ;;",
+    "esac",
+    "",
+    "# Extract file_path from tool input",
+    `FILE_PATH=$(echo "$INPUT" | jq -r '.tool_input.file_path // .tool_input.path // empty')`,
+    '[ -z "$FILE_PATH" ] && exit 0',
+    "",
+    "# Resolve to absolute path",
+    'if [[ "$FILE_PATH" != /* ]]; then',
+    `  CWD=$(echo "$INPUT" | jq -r '.cwd // empty')`,
+    '  [ -n "$CWD" ] && FILE_PATH="$CWD/$FILE_PATH"',
+    "fi",
+    "",
+    "# Check if path targets another agent's directory",
+    `AUGMENTED_BASE="${augmentedBase}"`,
+    'case "$FILE_PATH" in',
+    '  "$AUGMENTED_BASE"/*/*)  ',
+    '    AGENT_DIR=$(echo "$FILE_PATH" | sed "s|$AUGMENTED_BASE/||" | cut -d/ -f1)',
+    `    if [ "$AGENT_DIR" != "${codeName}" ] && [ "$AGENT_DIR" != "_mcp" ]; then`,
+    `      echo "$(date -u +%Y-%m-%dT%H:%M:%SZ) BLOCKED $TOOL on $FILE_PATH" >> "${logFile}"`,
+    `      echo "Access denied: you cannot access other agents' directories." >&2`,
+    "      exit 2",
+    "    fi ;;",
+    "esac",
+    "",
+    "exit 0"
+  ].join("\n") + "\n";
+  writeFileSync3(hookScriptPath, hookScript, { mode: 493 });
+  const settingsPath = join3(claudeDir, "settings.local.json");
+  let settings = {};
+  try {
+    settings = JSON.parse(readFileSync3(settingsPath, "utf-8"));
+  } catch {
+  }
+  const hooks = settings["hooks"] ?? {};
+  hooks["PreToolUse"] = [
+    {
+      hooks: [
+        {
+          type: "command",
+          command: hookScriptPath
+        }
+      ]
+    }
+  ];
+  settings["hooks"] = hooks;
+  writeFileSync3(settingsPath, JSON.stringify(settings, null, 2));
+}
 function modifyJsonConfig(filePath, fn) {
   let originalContent;
   let config;
@@ -2184,6 +2359,19 @@ function buildSettingsJson(input) {
   if (agent.primary_model) {
     settings["model"] = agent.primary_model;
   }
+  const projectDir = getProjectDir(agent.code_name);
+  const agentDir = getAgentDir(agent.code_name);
+  const homeDir = getHomeDir3();
+  settings["allowedDirectories"] = [
+    projectDir,
+    // Agent's project dir (CLAUDE.md, settings.json, etc.)
+    agentDir,
+    // Agent's config dir (.env, schedules, registration)
+    join3(homeDir, ".augmented", "_mcp"),
+    // Shared MCP binaries
+    "/tmp"
+    // Temp files
+  ];
   return settings;
 }
 function buildMcpJson(input) {
@@ -2384,9 +2572,9 @@ ${entry.content}`
   // so ensureGatewayRunning() returns early with running=false
   async getVersion() {
     try {
-      const { execFile: execFile3 } = await import("child_process");
+      const { execFile: execFile4 } = await import("child_process");
       return new Promise((resolve3) => {
-        execFile3("claude", ["--version"], { timeout: 5e3 }, (err, stdout) => {
+        execFile4("claude", ["--version"], { timeout: 5e3 }, (err, stdout) => {
           if (err) {
             resolve3(null);
             return;
@@ -2634,6 +2822,23 @@ ${entry.content}`
           args: ["-y", "@composio/mcp", "start", "--url", config.url],
           env: config.headers ?? {}
         };
+      } else if (config.url.includes("mcp.pipedream.net")) {
+        const pdUrl = new URL(config.url);
+        const pathParts = pdUrl.pathname.split("/").filter(Boolean);
+        const externalUserId = decodeURIComponent(pathParts[0] ?? "");
+        const appSlug = decodeURIComponent(pathParts[1] ?? "");
+        const headers = config.headers ?? {};
+        const authToken = (headers["Authorization"] ?? "").replace("Bearer ", "");
+        serverEntry = {
+          command: "npx",
+          args: ["-y", "@pipedream/mcp", "stdio", "--app", appSlug, "--external-user-id", externalUserId],
+          env: {
+            PIPEDREAM_PROJECT_ID: headers["x-pd-project-id"] ?? process.env["PIPEDREAM_PROJECT_ID"] ?? "",
+            PIPEDREAM_CLIENT_ID: headers["x-pd-client-id"] ?? process.env["PIPEDREAM_CLIENT_ID"] ?? "",
+            PIPEDREAM_CLIENT_SECRET: headers["x-pd-client-secret"] ?? process.env["PIPEDREAM_CLIENT_SECRET"] ?? "",
+            PIPEDREAM_PROJECT_ENVIRONMENT: headers["x-pd-environment"] ?? process.env["PIPEDREAM_ENVIRONMENT"] ?? "development"
+          }
+        };
       } else {
         serverEntry = {
           command: "npx",
@@ -2707,6 +2912,40 @@ ${entry.content}`
     };
     writeFileSync3(pluginsJsonPath, JSON.stringify(pluginsConfig, null, 2));
   },
+  executePluginHook(ctx) {
+    assertValidCodeName(ctx.codeName);
+    const agentRootDir = join3(getHomeDir3(), ".augmented", ctx.codeName);
+    const projectDir = getProjectDir(ctx.codeName);
+    mkdirSync3(agentRootDir, { recursive: true });
+    mkdirSync3(projectDir, { recursive: true });
+    const startedAt = Date.now();
+    return new Promise((resolve3) => {
+      const child = execFile3("bash", ["-c", ctx.script], {
+        cwd: agentRootDir,
+        timeout: 6e4,
+        maxBuffer: 1024 * 1024,
+        env: {
+          ...process.env,
+          AGENT_CODE_NAME: ctx.codeName,
+          AGENT_DIR: agentRootDir,
+          AGENT_PROJECT_DIR: projectDir,
+          AGENT_FRAMEWORK: "claude-code"
+        }
+      }, (error, stdout, stderr) => {
+        const durationMs = Date.now() - startedAt;
+        const timedOut = !!error && error.code === "ETIMEDOUT";
+        resolve3({
+          exitCode: error ? typeof error.code === "number" ? error.code : 1 : 0,
+          stdout: stdout?.toString() ?? "",
+          stderr: stderr?.toString() ?? "",
+          durationMs,
+          timedOut
+        });
+      });
+      child.on("error", () => {
+      });
+    });
+  },
   writeTokenFile(codeName, integrations) {
     const agentDir = getAgentDir(codeName);
     mkdirSync3(agentDir, { recursive: true });
@@ -2798,12 +3037,16 @@ function setActiveTeam(slug) {
   config.active_team = slug;
   saveConfig(config);
 }
+function getHost() {
+  return process.env["AGT_HOST"];
+}
 var AGT_HOST = process.env["AGT_HOST"];
 function requireHost() {
-  if (!AGT_HOST) {
+  const host = getHost();
+  if (!host) {
     throw new Error("AGT_HOST is not set. Export it to point at the Augmented API (e.g. export AGT_HOST=https://your-api.example.com)");
   }
-  return AGT_HOST;
+  return host;
 }
 
 // src/lib/api-client.ts
@@ -2843,6 +3086,11 @@ async function doExchange(rawKey, retried) {
   if (!res.ok) {
     const body = await res.json().catch(() => ({}));
     const errorMsg = String(body["error"] ?? res.statusText);
+    const host = requireHost();
+    const obfuscated = rawKey.length > 12 ? `${rawKey.slice(0, 8)}${"*".repeat(rawKey.length - 12)}${rawKey.slice(-4)}` : rawKey.slice(0, 4) + "****";
+    if (res.status >= 502 && res.status <= 504) {
+      throw new Error(`API unreachable (${res.status}): ${host} \u2014 is the API server running?`);
+    }
     if (errorMsg.includes("revoked") && !retried) {
       reloadFromShellProfile();
       const freshKey = getApiKey();
@@ -2850,8 +3098,6 @@ async function doExchange(rawKey, retried) {
         return doExchange(freshKey, true);
       }
     }
-    const host = requireHost();
-    const obfuscated = rawKey.length > 12 ? `${rawKey.slice(0, 8)}${"*".repeat(rawKey.length - 12)}${rawKey.slice(-4)}` : rawKey.slice(0, 4) + "****";
     throw new Error(`API key exchange failed: ${errorMsg} (host=${host}, key=${obfuscated})`);
   }
   const data = await res.json();
@@ -4501,7 +4747,12 @@ var ROLE_PERMISSIONS = {
     "audit_log.view",
     "host.create",
     "host.manage",
-    "host.view"
+    "host.view",
+    "plugin.view",
+    "plugin.install",
+    "plugin.configure",
+    "plugin.manage_scopes",
+    "plugin.approve_requests"
   ],
   admin: [
     "team.manage_members",
@@ -4515,7 +4766,12 @@ var ROLE_PERMISSIONS = {
     "audit_log.view",
     "host.create",
     "host.manage",
-    "host.view"
+    "host.view",
+    "plugin.view",
+    "plugin.install",
+    "plugin.configure",
+    "plugin.manage_scopes",
+    "plugin.approve_requests"
   ],
   member: [
     "agent.create",
@@ -4523,12 +4779,15 @@ var ROLE_PERMISSIONS = {
     "agent.deploy",
     "agent.view",
     "audit_log.view",
-    "host.view"
+    "host.view",
+    "plugin.install",
+    "plugin.view"
   ],
   viewer: [
     "agent.view",
     "audit_log.view",
-    "host.view"
+    "host.view",
+    "plugin.view"
   ]
 };
 var permissionSets = new Map(Object.entries(ROLE_PERMISSIONS).map(([role, actions]) => [role, new Set(actions)]));
@@ -4635,6 +4894,129 @@ function getTemplate(id) {
   return DEPLOYMENT_TEMPLATES.find((t) => t.id === id);
 }
 
+// ../../packages/core/dist/plugins/context-validator.js
+import Ajv20202 from "ajv/dist/2020.js";
+import addFormats2 from "ajv-formats";
+
+// ../../packages/core/dist/plugins/context-meta-schema.json
+var context_meta_schema_default = {
+  $schema: "https://json-schema.org/draft/2020-12/schema",
+  $id: "https://augmented.dev/schemas/plugin-context.meta.schema.json",
+  title: "Plugin Context Schema (meta)",
+  description: "Meta-schema for the constrained subset of JSON Schema that plugin authors may declare for their plugin context. Anything outside this subset is rejected at PUT time. See ENG-4341 / docs/plugins/plugin-context-rfc.md.",
+  type: "object",
+  required: ["type", "properties"],
+  additionalProperties: false,
+  properties: {
+    $schema: {
+      type: "string"
+    },
+    type: {
+      type: "string",
+      const: "object"
+    },
+    properties: {
+      type: "object",
+      minProperties: 0,
+      additionalProperties: {
+        $ref: "#/$defs/field"
+      }
+    },
+    required: {
+      type: "array",
+      items: { type: "string" },
+      uniqueItems: true
+    }
+  },
+  $defs: {
+    field: {
+      oneOf: [
+        { $ref: "#/$defs/stringField" },
+        { $ref: "#/$defs/booleanField" },
+        { $ref: "#/$defs/stringArrayField" },
+        { $ref: "#/$defs/stringMapField" }
+      ]
+    },
+    stringField: {
+      type: "object",
+      required: ["type"],
+      additionalProperties: false,
+      properties: {
+        type: { const: "string" },
+        title: { type: "string" },
+        description: { type: "string" },
+        enum: {
+          type: "array",
+          items: { type: "string" },
+          minItems: 1,
+          uniqueItems: true
+        },
+        default: { type: "string" }
+      }
+    },
+    booleanField: {
+      type: "object",
+      required: ["type"],
+      additionalProperties: false,
+      properties: {
+        type: { const: "boolean" },
+        title: { type: "string" },
+        description: { type: "string" },
+        default: { type: "boolean" }
+      }
+    },
+    stringArrayField: {
+      type: "object",
+      required: ["type", "items"],
+      additionalProperties: false,
+      properties: {
+        type: { const: "array" },
+        items: {
+          type: "object",
+          required: ["type"],
+          additionalProperties: false,
+          properties: {
+            type: { const: "string" }
+          }
+        },
+        title: { type: "string" },
+        description: { type: "string" },
+        default: {
+          type: "array",
+          items: { type: "string" }
+        }
+      }
+    },
+    stringMapField: {
+      type: "object",
+      required: ["type", "additionalProperties"],
+      additionalProperties: false,
+      properties: {
+        type: { const: "object" },
+        additionalProperties: {
+          type: "object",
+          required: ["type"],
+          additionalProperties: false,
+          properties: {
+            type: { const: "string" }
+          }
+        },
+        title: { type: "string" },
+        description: { type: "string" },
+        default: {
+          type: "object",
+          additionalProperties: { type: "string" }
+        }
+      }
+    }
+  }
+};
+
+// ../../packages/core/dist/plugins/context-validator.js
+var ajv2 = new Ajv20202({ allErrors: true, strict: false });
+addFormats2(ajv2);
+var compiledMetaSchema = ajv2.compile(context_meta_schema_default);
+
 // ../../packages/core/dist/drift/comparators.js
 function compareToolPolicy(expected, actual) {
   const findings = [];
@@ -4831,10 +5213,11 @@ export {
   getChannel,
   getAllChannelIds,
   provisionStopHook,
+  provisionIsolationHook,
   getApiKey,
   getActiveTeam,
   setActiveTeam,
-  AGT_HOST,
+  getHost,
   requireHost,
   exchangeApiKey,
   ApiError,
@@ -4861,4 +5244,4 @@ export {
   detectDrift,
   provision
 };
-//# sourceMappingURL=chunk-UWH2MMKY.js.map
+//# sourceMappingURL=chunk-VCKY6MN2.js.map