@integrity-labs/agt-cli 0.27.0 → 0.27.2

package/dist/bin/agt.js

@@ -1,6 +1,7 @@
 #!/usr/bin/env node
 import {
   ApiError,
+  DEFAULT_AGT_HOST,
   api,
   error,
   exchangeApiKey,
@@ -26,7 +27,7 @@ import {
   success,
   table,
   warn
-} from "../chunk-YWXPSVI5.js";
+} from "../chunk-5N3JKXMU.js";
 import {
   CHANNEL_REGISTRY,
   DEPLOYMENT_TEMPLATES,
@@ -52,10 +53,10 @@ import {
   renderTemplate,
   resolveChannels,
   serializeManifestForSlackCli
-} from "../chunk-BKLEFKUZ.js";
+} from "../chunk-JTZZ6YB2.js";
 
 // src/bin/agt.ts
-import { join as join12 } from "path";
+import { join as join14 } from "path";
 import { homedir as homedir5 } from "os";
 import { Command } from "commander";
 
@@ -550,8 +551,8 @@ async function lintCommand(path) {
       process.exitCode = 1;
       return;
     }
-    const { readdirSync, statSync: statSync2 } = await import("fs");
-    const entries = readdirSync(augmentedDir);
+    const { readdirSync: readdirSync2, statSync: statSync2 } = await import("fs");
+    const entries = readdirSync2(augmentedDir);
     for (const entry of entries) {
       const entryPath = join2(augmentedDir, entry);
       if (statSync2(entryPath).isDirectory()) {
@@ -1556,8 +1557,8 @@ async function provisionCommand(codeName, options) {
 import chalk10 from "chalk";
 import ora10 from "ora";
 import { spawn } from "child_process";
-import { writeFileSync as writeFileSync5 } from "fs";
-import { join as join7 } from "path";
+import { readFileSync as readFileSync4, writeFileSync as writeFileSync6 } from "fs";
+import { join as join9 } from "path";
 
 // src/lib/impersonate-flag.ts
 var ENV_VAR = "AGT_IMPERSONATE_ENABLED";
@@ -1621,6 +1622,11 @@ function ensureCodeNameDir(codeName) {
   mkdirSync4(dir, { recursive: true });
   return dir;
 }
+function ensureImpersonateWorkdir(codeName) {
+  const dir = join6(ensureCodeNameDir(codeName), "workdir");
+  mkdirSync4(dir, { recursive: true });
+  return dir;
+}
 function readActiveManifest() {
   if (!existsSync2(ACTIVE_MANIFEST_PATH)) return null;
   try {
@@ -1668,8 +1674,19 @@ import {
   unlinkSync
 } from "fs";
 import { homedir as homedir2 } from "os";
-import { sep } from "path";
+import { dirname, join as join7, parse, sep } from "path";
 var BACKUP_SUFFIX = ".pre-impersonate-backup";
+function findGitWorkTreeRoot(startDir) {
+  const { root } = parse(startDir);
+  let dir = startDir;
+  for (; ; ) {
+    if (existsSync3(join7(dir, ".git"))) return dir;
+    if (dir === root) return null;
+    const parent = dirname(dir);
+    if (parent === dir) return null;
+    dir = parent;
+  }
+}
 function swapInPersonaFile(projectPath, personaPath) {
   let kind;
   if (!lstatSafe(projectPath)) {
@@ -1734,6 +1751,139 @@ function lstatSafe(path) {
   }
 }
 
+// src/lib/impersonate-hook.ts
+import {
+  copyFileSync,
+  existsSync as existsSync4,
+  mkdirSync as mkdirSync5,
+  readdirSync,
+  readFileSync as readFileSync3,
+  renameSync as renameSync3,
+  rmdirSync,
+  unlinkSync as unlinkSync2,
+  writeFileSync as writeFileSync5
+} from "fs";
+import { join as join8 } from "path";
+var INTRODUCE_HOOK_COMMAND = "agt impersonate introduce";
+var SESSION_START_MATCHER = "startup";
+function registerIntroduceHook(projectCwd, command = INTRODUCE_HOOK_COMMAND) {
+  const claudeDir = join8(projectCwd, ".claude");
+  const createdClaudeDir = !existsSync4(claudeDir);
+  mkdirSync5(claudeDir, { recursive: true });
+  const settingsPath = join8(claudeDir, "settings.local.json");
+  const settingsExisted = existsSync4(settingsPath);
+  const backupPath = settingsPath + BACKUP_SUFFIX;
+  let settings = {};
+  if (settingsExisted) {
+    if (!existsSync4(backupPath)) {
+      copyFileSync(settingsPath, backupPath);
+    }
+    settings = asPlainObject(safeParseJson(readFileSync3(settingsPath, "utf-8")));
+  }
+  const hooks = asPlainObject(settings["hooks"]);
+  const existing = Array.isArray(hooks[SESSION_START_KEY]) ? [...hooks[SESSION_START_KEY]] : [];
+  const alreadyRegistered = existing.some(
+    (entry) => entryMatchesCommand(entry, command)
+  );
+  if (!alreadyRegistered) {
+    existing.push({
+      matcher: SESSION_START_MATCHER,
+      hooks: [{ type: "command", command }]
+    });
+  }
+  hooks[SESSION_START_KEY] = existing;
+  settings["hooks"] = hooks;
+  writeFileSync5(settingsPath, JSON.stringify(settings, null, 2) + "\n");
+  return {
+    settings_path: settingsPath,
+    settings_backup: settingsExisted ? "had-file" : "didnt-exist",
+    created_claude_dir: createdClaudeDir
+  };
+}
+function unregisterIntroduceHook(backup) {
+  const { settings_path, settings_backup, created_claude_dir } = backup;
+  const backupPath = settings_path + BACKUP_SUFFIX;
+  if (settings_backup === "had-file") {
+    if (existsSync4(backupPath)) {
+      renameSync3(backupPath, settings_path);
+    }
+  } else {
+    if (existsSync4(settings_path)) unlinkSync2(settings_path);
+    if (existsSync4(backupPath)) unlinkSync2(backupPath);
+  }
+  if (created_claude_dir) {
+    const claudeDir = dirOf(settings_path);
+    try {
+      if (existsSync4(claudeDir) && readdirSync(claudeDir).length === 0) {
+        rmdirSync(claudeDir);
+      }
+    } catch {
+    }
+  }
+}
+var SESSION_START_KEY = "SessionStart";
+function entryMatchesCommand(entry, command) {
+  if (entry.matcher !== SESSION_START_MATCHER) return false;
+  const entryHooks = entry.hooks;
+  return Array.isArray(entryHooks) && entryHooks.some(
+    (h) => typeof h === "object" && h !== null && h.type === "command" && h.command === command
+  );
+}
+function dirOf(filePath) {
+  const idx = filePath.lastIndexOf("/");
+  return idx === -1 ? filePath : filePath.slice(0, idx);
+}
+function safeParseJson(text) {
+  try {
+    return JSON.parse(text);
+  } catch {
+    return null;
+  }
+}
+function asPlainObject(value) {
+  return value !== null && typeof value === "object" && !Array.isArray(value) ? value : {};
+}
+
+// src/lib/impersonate-introduce.ts
+function parseIdentityFromClaudeMd(content) {
+  const headingMatch = content.match(/^#\s+(.+?)\s*$/m);
+  const displayName = headingMatch?.[1]?.trim() || null;
+  const roleMatch = content.match(
+    /^You are \*\*[^*]+\*\*,\s*\*\*([^*]+)\*\*/m
+  );
+  const role = roleMatch?.[1]?.trim() || null;
+  return { displayName, role };
+}
+function parseIntegrationsFromMcpJson(content) {
+  let parsed;
+  try {
+    parsed = JSON.parse(content);
+  } catch {
+    return [];
+  }
+  const servers = parsed?.mcpServers;
+  if (!servers || typeof servers !== "object" || Array.isArray(servers)) {
+    return [];
+  }
+  return Object.keys(servers).map(prettifyServerName);
+}
+function prettifyServerName(key) {
+  return key.split(/[-_]/).filter(Boolean).map((word) => word.charAt(0).toUpperCase() + word.slice(1)).join(" ");
+}
+function buildIntroduction(input4) {
+  const { displayName, codeName, role, integrations } = input4;
+  const spokenName = displayName || codeName;
+  const codeSuffix = displayName && displayName !== codeName ? ` (${codeName})` : "";
+  const roleClause = role ? `, ${role}` : "";
+  const lines = [`I'm ${spokenName}${codeSuffix}${roleClause}.`, ""];
+  if (integrations.length > 0) {
+    lines.push(`Connected integrations: ${integrations.join(", ")}.`);
+  } else {
+    lines.push("No integrations are connected.");
+  }
+  return lines.join("\n");
+}
+
 // src/commands/impersonate.ts
 var SWAP_FILES = ["CLAUDE.md", ".mcp.json"];
 var AGENT_IMPERSONATION_HEADER = "X-Agent-Impersonation";
@@ -1757,13 +1907,23 @@ async function impersonateConnectCommand(token, options = {}) {
     process.exitCode = 1;
     return;
   }
+  if (!options.workdir) {
+    const workTreeRoot = findGitWorkTreeRoot(process.cwd());
+    if (workTreeRoot) {
+      const msg = `Refusing to impersonate inside a git working tree (${workTreeRoot}). connect swaps the agent's ${SWAP_FILES.join(" + ")} into the current directory, which would overwrite the repo's own files. Re-run with \`--workdir\` to use an auto-provisioned dedicated directory, or run from a standalone empty directory.`;
+      if (json) jsonOutput({ ok: false, error: msg });
+      else error(msg);
+      process.exitCode = 1;
+      return;
+    }
+  }
   if (!json) console.log(chalk10.bold("\nAugmented \u2014 Impersonate\n"));
   const spinner = ora10({
     text: "Redeeming token\u2026",
     isSilent: json
   });
   spinner.start();
-  const host2 = getHost();
+  const host2 = (options.apiHost ?? DEFAULT_AGT_HOST).replace(/\/+$/, "");
   let bundle;
   try {
     const res = await fetch(`${host2}/impersonate/agent/redeem`, {
@@ -1787,25 +1947,27 @@ async function impersonateConnectCommand(token, options = {}) {
   }
   spinner.text = "Writing persona files\u2026";
   const personaDir = ensureCodeNameDir(bundle.agent.code_name);
-  writeFileSync5(
-    join7(personaDir, "CLAUDE.md"),
+  writeFileSync6(
+    join9(personaDir, "CLAUDE.md"),
     bundle.artifacts["CLAUDE.md"]
   );
-  writeFileSync5(
-    join7(personaDir, ".mcp.json"),
+  writeFileSync6(
+    join9(personaDir, ".mcp.json"),
     bundle.artifacts[".mcp.json"]
   );
   spinner.text = "Swapping persona files\u2026";
-  const projectCwd = process.cwd();
+  const projectCwd = options.workdir ? ensureImpersonateWorkdir(bundle.agent.code_name) : process.cwd();
   const backups = {};
   const swapped = [];
+  let hookBackup;
   try {
     for (const file of SWAP_FILES) {
-      const projectPath = join7(projectCwd, file);
-      const kind = swapInPersonaFile(projectPath, join7(personaDir, file));
+      const projectPath = join9(projectCwd, file);
+      const kind = swapInPersonaFile(projectPath, join9(personaDir, file));
       backups[file] = kind;
       swapped.push({ file, kind });
     }
+    hookBackup = registerIntroduceHook(projectCwd);
     const manifest = {
       code_name: bundle.agent.code_name,
       agent_id: bundle.agent.agent_id,
@@ -1816,13 +1978,20 @@ async function impersonateConnectCommand(token, options = {}) {
       minted_at: (/* @__PURE__ */ new Date()).toISOString(),
       project_cwd: projectCwd,
       host: host2,
-      backups
+      backups,
+      hook: hookBackup
     };
     writeActiveManifest(manifest);
   } catch (err) {
+    if (hookBackup) {
+      try {
+        unregisterIntroduceHook(hookBackup);
+      } catch {
+      }
+    }
     for (const { file, kind } of [...swapped].reverse()) {
       try {
-        restoreSwapped(join7(projectCwd, file), kind);
+        restoreSwapped(join9(projectCwd, file), kind);
       } catch {
       }
     }
@@ -1856,6 +2025,9 @@ async function impersonateConnectCommand(token, options = {}) {
   console.log(`  Swapped:    ${chalk10.dim(SWAP_FILES.join(", "))}`);
   console.log();
   if (!shouldLaunchClaude) {
+    if (options.workdir) {
+      info(`Start Claude Code in the impersonation workdir: \`cd ${projectCwd}\``);
+    }
     info(
       "Restart Claude Code to pick up the agent's persona + MCP server set. Claude Code 2.1.152 does not honour `tools/list_changed` in-session (spike PoC, ENG-4733)."
     );
@@ -1968,7 +2140,7 @@ async function impersonateExitCommand() {
   }
   const restored = [];
   for (const [file, kind] of Object.entries(manifest.backups)) {
-    const projectPath = join7(manifest.project_cwd, file);
+    const projectPath = join9(manifest.project_cwd, file);
     try {
       restoreSwapped(projectPath, kind);
       restored.push(file);
@@ -1977,6 +2149,14 @@ async function impersonateExitCommand() {
       if (!json) error(`Failed to restore ${file}: ${msg}`);
     }
   }
+  if (manifest.hook) {
+    try {
+      unregisterIntroduceHook(manifest.hook);
+    } catch (err) {
+      const msg = err instanceof Error ? err.message : String(err);
+      if (!json) error(`Failed to remove introduce hook: ${msg}`);
+    }
+  }
   clearActiveManifest();
   if (json) {
     jsonOutput({
@@ -1998,6 +2178,37 @@ async function impersonateExitCommand() {
   }
   info("Restart Claude Code to pick up your original persona.");
 }
+async function impersonateIntroduceCommand() {
+  try {
+    const manifest = readActiveManifest();
+    if (!manifest || isExpired(manifest)) return;
+    const cwd = manifest.project_cwd;
+    const identity = readClaudeMdIdentity(join9(cwd, "CLAUDE.md"));
+    const integrations = readMcpIntegrations(join9(cwd, ".mcp.json"));
+    const intro = buildIntroduction({
+      displayName: identity.displayName,
+      codeName: manifest.code_name,
+      role: identity.role,
+      integrations
+    });
+    process.stdout.write(intro + "\n");
+  } catch {
+  }
+}
+function readClaudeMdIdentity(path) {
+  try {
+    return parseIdentityFromClaudeMd(readFileSync4(path, "utf-8"));
+  } catch {
+    return { displayName: null, role: null };
+  }
+}
+function readMcpIntegrations(path) {
+  try {
+    return parseIntegrationsFromMcpJson(readFileSync4(path, "utf-8"));
+  } catch {
+    return [];
+  }
+}
 
 // src/commands/drift.ts
 import chalk11 from "chalk";
@@ -2006,7 +2217,7 @@ import ora11 from "ora";
 // ../../packages/core/dist/drift/live-state-reader.js
 import { readFile } from "fs/promises";
 import { createHash } from "crypto";
-import { join as join8 } from "path";
+import { join as join10 } from "path";
 import JSON5 from "json5";
 async function hashFile(filePath) {
   try {
@@ -2030,8 +2241,8 @@ async function readLiveState(options) {
   const toolsFile = trackedFiles.find((f) => f.includes("TOOLS")) ?? "TOOLS.md";
   const [frameworkConfig, charterHash, toolsHash] = await Promise.all([
     readJsonFile(options.configPath),
-    hashFile(join8(options.teamDir, charterFile)),
-    hashFile(join8(options.teamDir, toolsFile))
+    hashFile(join10(options.teamDir, charterFile)),
+    hashFile(join10(options.teamDir, toolsFile))
   ]);
   return {
     frameworkConfig,
@@ -2640,15 +2851,15 @@ function terminate(child) {
 // src/commands/manager-watch.tsx
 import { useEffect, useState, useMemo } from "react";
 import { render, Box, Text, useApp, useInput } from "ink";
-import { existsSync as existsSync4, readFileSync as readFileSync3, statSync, openSync, readSync, closeSync } from "fs";
+import { existsSync as existsSync5, readFileSync as readFileSync5, statSync, openSync, readSync, closeSync } from "fs";
 import { homedir as homedir3 } from "os";
-import { join as join9 } from "path";
+import { join as join11 } from "path";
 import { jsx, jsxs } from "react/jsx-runtime";
 var REFRESH_MS = 1e3;
 var LOG_TAIL_LINES = 200;
 var DETAIL_RECENT_LINES = 50;
 function managerWatchCommand(opts = {}) {
-  const configDir = opts.configDir ?? join9(homedir3(), ".augmented");
+  const configDir = opts.configDir ?? join11(homedir3(), ".augmented");
   const paths = getManagerPaths(configDir);
   const isTty = process.stdout.isTTY === true && process.stdin.isTTY === true;
   if (opts.noTui || !isTty) {
@@ -2672,15 +2883,15 @@ function managerWatchCommand(opts = {}) {
 }
 function readState(stateFile) {
   try {
-    if (!existsSync4(stateFile)) return null;
-    const raw = readFileSync3(stateFile, "utf-8");
+    if (!existsSync5(stateFile)) return null;
+    const raw = readFileSync5(stateFile, "utf-8");
     return JSON.parse(raw);
   } catch {
     return null;
   }
 }
 function tailLogFile(logFile, lines) {
-  if (!existsSync4(logFile)) return [];
+  if (!existsSync5(logFile)) return [];
   try {
     const fileSize = statSync(logFile).size;
     if (fileSize === 0) return [];
@@ -2921,7 +3132,7 @@ function truncate(s, max) {
   return s.length > max ? `${s.slice(0, Math.max(0, max - 1))}\u2026` : s;
 }
 function streamLogFile(logFile) {
-  if (!existsSync4(logFile)) {
+  if (!existsSync5(logFile)) {
     process.stderr.write(`No manager log found at ${logFile}.
 Start the manager first: agt manager start
 `);
@@ -2930,7 +3141,7 @@ Start the manager first: agt manager start
   }
   let lastSize = 0;
   try {
-    const initial = readFileSync3(logFile, "utf-8");
+    const initial = readFileSync5(logFile, "utf-8");
     process.stdout.write(initial);
     lastSize = statSync(logFile).size;
   } catch (err) {
@@ -2967,14 +3178,14 @@ Start the manager first: agt manager start
 // src/commands/agent.ts
 import chalk14 from "chalk";
 import JSON52 from "json5";
-import { readFileSync as readFileSync4, existsSync as existsSync5 } from "fs";
-import { join as join10 } from "path";
+import { readFileSync as readFileSync6, existsSync as existsSync6 } from "fs";
+import { join as join12 } from "path";
 async function agentShowCommand(codeName, opts) {
   const json = isJsonMode();
-  const unifiedDir = join10(opts.configDir, codeName, "provision");
-  const legacyDir = join10(opts.configDir, codeName, "claudecode", "provision");
-  const agentDir = existsSync5(unifiedDir) ? unifiedDir : legacyDir;
-  const hasLocalConfig = existsSync5(agentDir);
+  const unifiedDir = join12(opts.configDir, codeName, "provision");
+  const legacyDir = join12(opts.configDir, codeName, "claudecode", "provision");
+  const agentDir = existsSync6(unifiedDir) ? unifiedDir : legacyDir;
+  const hasLocalConfig = existsSync6(agentDir);
   let apiChannels = null;
   let apiAgent = null;
   if (getApiKey()) {
@@ -3007,34 +3218,34 @@ async function agentShowCommand(codeName, opts) {
   let openclawConfig = null;
   let agentState = null;
   if (hasLocalConfig) {
-    const charterPath = join10(agentDir, "CHARTER.md");
-    if (existsSync5(charterPath)) {
-      const raw = readFileSync4(charterPath, "utf-8");
+    const charterPath = join12(agentDir, "CHARTER.md");
+    if (existsSync6(charterPath)) {
+      const raw = readFileSync6(charterPath, "utf-8");
       const parsed = extractFrontmatter(raw);
       if (parsed.frontmatter) {
         charter = parsed.frontmatter;
       }
     }
-    const toolsPath = join10(agentDir, "TOOLS.md");
-    if (existsSync5(toolsPath)) {
-      const raw = readFileSync4(toolsPath, "utf-8");
+    const toolsPath = join12(agentDir, "TOOLS.md");
+    if (existsSync6(toolsPath)) {
+      const raw = readFileSync6(toolsPath, "utf-8");
       const parsed = extractFrontmatter(raw);
       if (parsed.frontmatter) {
         tools = parsed.frontmatter;
       }
     }
-    const openclawPath = join10(agentDir, "openclaw.json5");
-    if (existsSync5(openclawPath)) {
+    const openclawPath = join12(agentDir, "openclaw.json5");
+    if (existsSync6(openclawPath)) {
       try {
-        const raw = readFileSync4(openclawPath, "utf-8");
+        const raw = readFileSync6(openclawPath, "utf-8");
         openclawConfig = JSON52.parse(raw);
       } catch {
       }
     }
-    const statePath = join10(opts.configDir, "manager-state.json");
-    if (existsSync5(statePath)) {
+    const statePath = join12(opts.configDir, "manager-state.json");
+    if (existsSync6(statePath)) {
       try {
-        const raw = readFileSync4(statePath, "utf-8");
+        const raw = readFileSync6(statePath, "utf-8");
         const state = JSON.parse(raw);
         agentState = state.agents?.find((a) => a.codeName === codeName) ?? null;
       } catch {
@@ -3371,8 +3582,8 @@ async function kanbanRecurringDisableCommand(titleOrId, opts) {
 }
 
 // src/commands/setup.ts
-import { existsSync as existsSync6, readFileSync as readFileSync5, writeFileSync as writeFileSync6, mkdirSync as mkdirSync5, accessSync, constants as fsConstants } from "fs";
-import { join as join11, dirname } from "path";
+import { existsSync as existsSync7, readFileSync as readFileSync7, writeFileSync as writeFileSync7, mkdirSync as mkdirSync6, accessSync, constants as fsConstants } from "fs";
+import { join as join13, dirname as dirname2 } from "path";
 import { homedir as homedir4 } from "os";
 import chalk16 from "chalk";
 import ora14 from "ora";
@@ -3380,15 +3591,15 @@ function detectShellProfile() {
   const shell = process.env["SHELL"] ?? "";
   const home = homedir4();
   if (shell.includes("zsh")) {
-    return join11(home, ".zshrc");
+    return join13(home, ".zshrc");
   }
   if (shell.includes("fish")) {
-    const fishConfig = join11(home, ".config", "fish", "config.fish");
+    const fishConfig = join13(home, ".config", "fish", "config.fish");
     return fishConfig;
   }
-  const bashrc = join11(home, ".bashrc");
-  if (existsSync6(bashrc)) return bashrc;
-  return join11(home, ".bash_profile");
+  const bashrc = join13(home, ".bashrc");
+  if (existsSync7(bashrc)) return bashrc;
+  return join13(home, ".bash_profile");
 }
 function maybeWriteSystemWideEnv(apiUrl, apiKey, consoleUrl) {
   const empty = { etcEnvironment: false, profileD: false, bashrc: false };
@@ -3414,14 +3625,14 @@ function quoteForFishShell(value) {
 }
 function writeEtcEnvironment(apiUrl, apiKey, consoleUrl) {
   const envPath = "/etc/environment";
-  if (!existsSync6(envPath)) return false;
+  if (!existsSync7(envPath)) return false;
   try {
     accessSync(envPath, fsConstants.W_OK);
   } catch {
     return false;
   }
   try {
-    const current = readFileSync5(envPath, "utf-8");
+    const current = readFileSync7(envPath, "utf-8");
     const stripped = current.split(/\r?\n/).filter((line) => !/^\s*(?:export\s+)?AGT_(?:HOST|API_KEY|CONSOLE_URL)=/.test(line)).join("\n");
     const base = stripped.endsWith("\n") || stripped.length === 0 ? stripped : `${stripped}
 `;
@@ -3432,7 +3643,7 @@ function writeEtcEnvironment(apiUrl, apiKey, consoleUrl) {
     if (consoleUrl) lines.push(`AGT_CONSOLE_URL=${quoteForEtcEnvironment(consoleUrl)}`);
     const appended = `${base}${lines.join("\n")}
 `;
-    writeFileSync6(envPath, appended, { mode: 420 });
+    writeFileSync7(envPath, appended, { mode: 420 });
     return true;
   } catch {
     return false;
@@ -3440,7 +3651,7 @@ function writeEtcEnvironment(apiUrl, apiKey, consoleUrl) {
 }
 function writeProfileDScript(apiUrl, apiKey, consoleUrl) {
   const profileD = "/etc/profile.d";
-  if (!existsSync6(profileD)) return false;
+  if (!existsSync7(profileD)) return false;
   try {
     accessSync(profileD, fsConstants.W_OK);
   } catch {
@@ -3455,7 +3666,7 @@ function writeProfileDScript(apiUrl, apiKey, consoleUrl) {
     ];
     if (consoleUrl) lines.push(`export AGT_CONSOLE_URL=${quoteForPosixShell(consoleUrl)}`);
     lines.push("");
-    writeFileSync6(scriptPath, lines.join("\n"), { mode: 420 });
+    writeFileSync7(scriptPath, lines.join("\n"), { mode: 420 });
     return true;
   } catch {
     return false;
@@ -3463,14 +3674,14 @@ function writeProfileDScript(apiUrl, apiKey, consoleUrl) {
 }
 function ensureBashrcSourcesProfileD() {
   const bashrc = "/etc/bashrc";
-  if (!existsSync6(bashrc)) return false;
+  if (!existsSync7(bashrc)) return false;
   try {
     accessSync(bashrc, fsConstants.W_OK);
   } catch {
     return false;
   }
   try {
-    const current = readFileSync5(bashrc, "utf-8");
+    const current = readFileSync7(bashrc, "utf-8");
     const marker = "# Augmented (agt) \u2014 source system-wide AGT env";
     if (current.includes(marker)) return true;
     const snippet = [
@@ -3481,7 +3692,7 @@ function ensureBashrcSourcesProfileD() {
       "fi",
       ""
     ].join("\n");
-    writeFileSync6(bashrc, current + snippet);
+    writeFileSync7(bashrc, current + snippet);
     return true;
   } catch {
     return false;
@@ -3596,12 +3807,12 @@ async function setupCommand(token) {
     );
   }
   const exportLines = buildExportLines(shell, finalApiUrl, setupResult.api_key, consoleUrl);
-  const profileDir = dirname(profilePath);
-  if (!existsSync6(profileDir)) {
-    mkdirSync5(profileDir, { recursive: true });
+  const profileDir = dirname2(profilePath);
+  if (!existsSync7(profileDir)) {
+    mkdirSync6(profileDir, { recursive: true });
   }
   const marker = "# Augmented (agt) host configuration";
-  const current = existsSync6(profilePath) ? readFileSync5(profilePath, "utf-8") : "";
+  const current = existsSync7(profilePath) ? readFileSync7(profilePath, "utf-8") : "";
   let updated;
   if (current.includes(marker)) {
     updated = current.replace(
@@ -3614,7 +3825,7 @@ async function setupCommand(token) {
   } else {
     updated = current + exportLines;
   }
-  writeFileSync6(profilePath, updated.endsWith("\n") ? updated : `${updated}
+  writeFileSync7(profilePath, updated.endsWith("\n") ? updated : `${updated}
 `);
   if (!json) {
     success(`Environment variables written to ${chalk16.bold(profilePath)}`);
@@ -3632,7 +3843,7 @@ async function setupCommand(token) {
   const managerSpinner = ora14({ text: "Starting manager daemon\u2026", isSilent: json });
   managerSpinner.start();
   try {
-    const configDir = join11(homedir4(), ".augmented");
+    const configDir = join13(homedir4(), ".augmented");
     const { pid } = startWatchdog({ intervalMs: 1e4, configDir, detached: true });
     managerSpinner.succeed(`Manager started (PID ${pid})`);
   } catch (err) {
@@ -4180,10 +4391,10 @@ async function acpxCloseCommand(agent2, _opts, cmd) {
 
 // src/commands/update.ts
 import { execFileSync, execSync } from "child_process";
-import { existsSync as existsSync7, realpathSync as realpathSync2 } from "fs";
+import { existsSync as existsSync8, realpathSync as realpathSync2 } from "fs";
 import chalk18 from "chalk";
 import ora16 from "ora";
-var cliVersion = true ? "0.27.0" : "dev";
+var cliVersion = true ? "0.27.2" : "dev";
 async function fetchLatestVersion() {
   const host2 = getHost();
   if (!host2) return null;
@@ -4203,9 +4414,9 @@ async function fetchLatestVersion() {
 }
 function isNewerVersion(local, remote) {
   if (local === "dev") return false;
-  const parse = (v) => v.replace(/^v/, "").split(".").map(Number);
-  const lParts = parse(local);
-  const rParts = parse(remote);
+  const parse2 = (v) => v.replace(/^v/, "").split(".").map(Number);
+  const lParts = parse2(local);
+  const rParts = parse2(remote);
   const lMaj = lParts[0] ?? 0, lMin = lParts[1] ?? 0, lPat = lParts[2] ?? 0;
   const rMaj = rParts[0] ?? 0, rMin = rParts[1] ?? 0, rPat = rParts[2] ?? 0;
   if (rMaj !== lMaj) return rMaj > lMaj;
@@ -4287,7 +4498,7 @@ function performUpdate(version) {
 function detectBrewOwner() {
   for (const prefix of ["/home/linuxbrew/.linuxbrew", "/opt/homebrew", "/usr/local"]) {
     const cellar = `${prefix}/Cellar`;
-    if (!existsSync7(cellar)) continue;
+    if (!existsSync8(cellar)) continue;
     try {
       return execSync(`stat -c %U "${cellar}" 2>/dev/null || stat -f %Su "${cellar}"`, { encoding: "utf-8" }).trim() || null;
     } catch {
@@ -4715,7 +4926,7 @@ function handleError(err) {
 }
 
 // src/bin/agt.ts
-var cliVersion2 = true ? "0.27.0" : "dev";
+var cliVersion2 = true ? "0.27.2" : "dev";
 var program = new Command();
 program.name("agt").description("Augmented CLI \u2014 agent provisioning and management").version(cliVersion2).option("--json", "Emit machine-readable JSON output (suppress spinners and colors)").option("--skip-update-check", "Skip the automatic update check on startup");
 program.hook("preAction", (thisCommand) => {
@@ -4738,16 +4949,27 @@ impersonate.command("connect <token>").description(
 ).option(
   "--no-launch",
   "Skip launching Claude Code after the swap (operator manages their own session)"
+).option(
+  "--workdir",
+  "Swap into an auto-provisioned dedicated directory (~/.augmented-impersonate/<agent>/workdir) instead of the current directory \u2014 required when the current directory is inside a git repo"
+).option(
+  "--api-host <url>",
+  "Override the API host used to redeem the token. Defaults to https://api.augmented.team \u2014 AGT_HOST is intentionally ignored so a dev/Tailscale AGT_HOST doesn't accidentally 502 against a token minted on prod."
 ).action(
   (token, opts) => (
     // Commander negates --no-FLAG into opts.flag, so --no-launch arrives
     // as opts.launch === false. Translate to the command's noLaunch
     // option, defaulting to launching when the flag isn't passed.
-    impersonateConnectCommand(token, { noLaunch: opts.launch === false })
+    impersonateConnectCommand(token, {
+      noLaunch: opts.launch === false,
+      workdir: opts.workdir === true,
+      apiHost: opts.apiHost
+    })
   )
 );
 impersonate.command("current").description('Print the active impersonation (or "none")').action(impersonateCurrentCommand);
 impersonate.command("exit").description("End the active impersonation, restore project files, and notify the server").action(impersonateExitCommand);
+impersonate.command("introduce", { hidden: true }).description("Print the impersonated agent's self-introduction (SessionStart hook target)").action(impersonateIntroduceCommand);
 program.command("init").description("Create a new agent (interactive wizard, or non-interactive with --name)").option("--name <display-name>", "Agent display name (triggers non-interactive mode)").option("--code-name <code-name>", "Agent code name (kebab-case, derived from --name if omitted)").option("--description <text>", "Short agent description").option("--env <environment>", "Environment: dev | stage | prod", "dev").option("--risk-tier <tier>", "Risk tier: Low | Medium | High", "Low").option("--budget-type <type>", "Budget type: tokens | dollars | both", "tokens").option("--budget-tokens <number>", "Token budget limit", "10000").option("--budget-dollars <number>", "Dollar budget limit", "10").option("--budget-window <window>", "Budget window: daily | weekly | monthly", "daily").option("--budget-enforcement <mode>", "Budget enforcement: block | throttle | alert | degrade", "block").option("--channels <list>", "Comma-separated channel IDs").option("--logging <mode>", "Logging mode: redacted | hash-only | full-local", "redacted").action(initCommand);
 program.command("lint").argument("[path]", "Path to agent directory (default: all agents in .augmented/)").description("Lint CHARTER.md and TOOLS.md files").action(lintCommand);
 var channels = program.command("channels").description("Manage and inspect channel configuration");
@@ -4780,16 +5002,16 @@ host.command("pair <host-name>").description("Start an SSM port-forward + shell
   })
 );
 var manager = program.command("manager").description("Host config sync daemon \u2014 keeps local agent files in sync with API");
-manager.command("start").description("Start the manager daemon (polls API for config changes and detects local drift)").option("--interval <seconds>", "Poll interval in seconds (min 5)", "10").option("--config-dir <dir>", "Config directory for agent files", join12(homedir5(), ".augmented")).option("--supervise", "Wrap the manager in a respawn-on-clean-exit loop so auto-upgrades can restart it transparently (ENG-4488)", false).action(managerStartCommand);
-manager.command("stop").description("Stop the running manager daemon").option("--config-dir <dir>", "Config directory for agent files", join12(homedir5(), ".augmented")).action(managerStopCommand);
-manager.command("status").description("Show the current manager daemon status and discovered agents").option("--config-dir <dir>", "Config directory for agent files", join12(homedir5(), ".augmented")).action(managerStatusCommand);
-manager.command("watch").description("Live TUI dashboard \u2014 per-agent boxes, drill-in, log tail. Read-only (ENG-4555).").option("--config-dir <dir>", "Config directory for agent files", join12(homedir5(), ".augmented")).option("--no-tui", "Skip the TUI and stream the manager log to stdout instead (CI / scripts)").action(managerWatchCommand);
-manager.command("install").description("Install OS-level supervisor (launchd LaunchAgent on macOS) so the manager auto-restarts after crash, reboot, or self-update (ENG-4593)").option("--interval <seconds>", "Poll interval in seconds (min 5)", "10").option("--config-dir <dir>", "Config directory for agent files", join12(homedir5(), ".augmented")).action(managerInstallCommand);
+manager.command("start").description("Start the manager daemon (polls API for config changes and detects local drift)").option("--interval <seconds>", "Poll interval in seconds (min 5)", "10").option("--config-dir <dir>", "Config directory for agent files", join14(homedir5(), ".augmented")).option("--supervise", "Wrap the manager in a respawn-on-clean-exit loop so auto-upgrades can restart it transparently (ENG-4488)", false).action(managerStartCommand);
+manager.command("stop").description("Stop the running manager daemon").option("--config-dir <dir>", "Config directory for agent files", join14(homedir5(), ".augmented")).action(managerStopCommand);
+manager.command("status").description("Show the current manager daemon status and discovered agents").option("--config-dir <dir>", "Config directory for agent files", join14(homedir5(), ".augmented")).action(managerStatusCommand);
+manager.command("watch").description("Live TUI dashboard \u2014 per-agent boxes, drill-in, log tail. Read-only (ENG-4555).").option("--config-dir <dir>", "Config directory for agent files", join14(homedir5(), ".augmented")).option("--no-tui", "Skip the TUI and stream the manager log to stdout instead (CI / scripts)").action(managerWatchCommand);
+manager.command("install").description("Install OS-level supervisor (launchd LaunchAgent on macOS) so the manager auto-restarts after crash, reboot, or self-update (ENG-4593)").option("--interval <seconds>", "Poll interval in seconds (min 5)", "10").option("--config-dir <dir>", "Config directory for agent files", join14(homedir5(), ".augmented")).action(managerInstallCommand);
 manager.command("uninstall").description("Remove the OS-level supervisor (launchctl unload + delete plist on macOS). Idempotent.").action(managerUninstallCommand);
 manager.command("install-system-unit").description("Install a system-level systemd unit (Linux, root) so the manager auto-starts on every boot. For headless EC2 hosts \u2014 survives reboot without `loginctl enable-linger`. (ENG-4706)").option("--interval <seconds>", "Poll interval in seconds (min 5)", "10").option("--config-dir <dir>", "Config directory for agent files (defaults to /root/.augmented or /home/<user>/.augmented)").option("--user <name>", "Unix user the manager runs as", "root").action(managerInstallSystemUnitCommand);
 manager.command("uninstall-system-unit").description("Remove the system-level systemd unit (Linux, root). Idempotent. (ENG-4706)").action(managerUninstallSystemUnitCommand);
 var agent = program.command("agent").description("Inspect and manage agents");
-agent.command("show <code-name>").description("Display an agent's provisioned OpenClaw configuration").option("--config-dir <dir>", "Config directory", join12(homedir5(), ".augmented")).option("--all-channels", "Show all channels (including disabled)").action(agentShowCommand);
+agent.command("show <code-name>").description("Display an agent's provisioned OpenClaw configuration").option("--config-dir <dir>", "Config directory", join14(homedir5(), ".augmented")).option("--all-channels", "Show all channels (including disabled)").action(agentShowCommand);
 var kanban = program.command("kanban").description("Manage agent kanban boards");
 kanban.command("list").description("List kanban board items for an agent").requiredOption("--agent <code-name>", "Agent code name").action(kanbanListCommand);
 kanban.command("add <title>").description("Add a new item to an agent kanban board").requiredOption("--agent <code-name>", "Agent code name").option("--priority <1|2|3>", "Priority: 1=high, 2=medium, 3=low", "2").option("--status <status>", "Initial status: backlog | todo | in_progress", "todo").option("--description <text>", "Item description").option("--estimate <minutes>", "Estimated time in minutes").option("--deliverable <text>", "Expected output/deliverable").action(kanbanAddCommand);