@integrity-labs/agt-cli 0.27.134 → 0.27.136

package/dist/{chunk-4Y7APKV7.js → chunk-4B6KOQQL.js}

@@ -9,7 +9,65 @@ import {
   parseDeliveryTarget,
   registerFramework,
   wrapScheduledTaskPrompt
-} from "./chunk-4I2QOVP5.js";
+} from "./chunk-HDWKI7W3.js";
+
+// ../../packages/core/dist/provisioning/provisioner.js
+import { createHash } from "crypto";
+function sha256(content) {
+  return createHash("sha256").update(content, "utf8").digest("hex");
+}
+function provision(input, frameworkId = "openclaw") {
+  const adapter = getFramework(frameworkId);
+  const artifacts = adapter.buildArtifacts(input);
+  const charterHash = sha256(input.charterContent);
+  const toolsHash = sha256(input.toolsContent);
+  const teamDir = `.augmented/${input.agent.code_name}`;
+  return {
+    teamDir,
+    artifacts,
+    charterHash,
+    toolsHash
+  };
+}
+
+// ../../packages/core/dist/provisioning/hook-env.js
+function augmentedHookPath(currentPath) {
+  const extras = [
+    "/home/linuxbrew/.linuxbrew/bin",
+    "/opt/homebrew/bin",
+    "/usr/local/bin",
+    "/usr/bin",
+    "/bin"
+  ];
+  const seen = /* @__PURE__ */ new Set();
+  const parts = [];
+  const push = (p) => {
+    if (!p || seen.has(p))
+      return;
+    seen.add(p);
+    parts.push(p);
+  };
+  for (const p of (currentPath ?? "").split(":"))
+    push(p);
+  for (const p of extras)
+    push(p);
+  return parts.join(":");
+}
+function extractCommandNotFound(stderr) {
+  if (!stderr)
+    return null;
+  const SAFE_CMD = /^[A-Za-z][A-Za-z0-9._-]{0,63}$/;
+  for (const line of stderr.split(/\r?\n/)) {
+    const m = line.match(/^(?:bash|sh): (?:line \d+: )?([^:\s]+): command not found$/);
+    if (m?.[1]) {
+      const rawCmd = m[1].trim();
+      const cmd = rawCmd.split("/").pop() ?? rawCmd;
+      if (SAFE_CMD.test(cmd))
+        return cmd;
+    }
+  }
+  return null;
+}
 
 // ../../packages/core/dist/integrations/registry.js
 var INTEGRATION_REGISTRY = [
@@ -421,52 +479,370 @@ function getIntegration(id) {
   return integrationMap.get(id);
 }
 
-// ../../packages/core/dist/provisioning/hook-env.js
-function augmentedHookPath(currentPath) {
-  const extras = [
-    "/home/linuxbrew/.linuxbrew/bin",
-    "/opt/homebrew/bin",
-    "/usr/local/bin",
-    "/usr/bin",
-    "/bin"
-  ];
-  const seen = /* @__PURE__ */ new Set();
-  const parts = [];
-  const push = (p) => {
-    if (!p || seen.has(p))
-      return;
-    seen.add(p);
-    parts.push(p);
-  };
-  for (const p of (currentPath ?? "").split(":"))
-    push(p);
-  for (const p of extras)
-    push(p);
-  return parts.join(":");
+// ../../packages/core/dist/provisioning/env-integrations-file.js
+function shellQuote(value) {
+  return `'${value.replace(/'/g, `'\\''`)}'`;
 }
-function extractCommandNotFound(stderr) {
-  if (!stderr)
-    return null;
-  const SAFE_CMD = /^[A-Za-z][A-Za-z0-9._-]{0,63}$/;
-  for (const line of stderr.split(/\r?\n/)) {
-    const m = line.match(/^(?:bash|sh): (?:line \d+: )?([^:\s]+): command not found$/);
-    if (m?.[1]) {
-      const rawCmd = m[1].trim();
-      const cmd = rawCmd.split("/").pop() ?? rawCmd;
-      if (SAFE_CMD.test(cmd))
-        return cmd;
+var CHANNEL_SECRET_ENV_KEYS = [
+  "SLACK_BOT_TOKEN",
+  "SLACK_APP_TOKEN",
+  "TELEGRAM_BOT_TOKEN",
+  "MSTEAMS_CLIENT_SECRET"
+];
+var MCP_SERVER_SECRET_ENV_KEYS = [
+  "COMPOSIO_API_KEY",
+  "PIPEDREAM_CLIENT_SECRET"
+];
+var PRESERVED_ENV_KEYS = [
+  ...CHANNEL_SECRET_ENV_KEYS,
+  ...MCP_SERVER_SECRET_ENV_KEYS
+];
+var HEADER = "# Augmented integrations \u2014 auto-generated, do not edit";
+function parseEnvFileEntries(content) {
+  const out = /* @__PURE__ */ new Map();
+  for (const line of content.split("\n")) {
+    if (!line || line.startsWith("#") || !line.includes("="))
+      continue;
+    const eqIdx = line.indexOf("=");
+    out.set(line.slice(0, eqIdx), line.slice(eqIdx + 1));
+  }
+  return out;
+}
+function renderEnvIntegrations(entries) {
+  const lines = [HEADER];
+  for (const [key, rendered] of entries)
+    lines.push(`${key}=${rendered}`);
+  return lines.join("\n") + "\n";
+}
+function mergeEnvIntegrationsContent(existing, args) {
+  const current = existing === null ? /* @__PURE__ */ new Map() : parseEnvFileEntries(existing);
+  let next;
+  if (args.mode === "upsert") {
+    next = new Map(current);
+    for (const [key, raw] of Object.entries(args.updates)) {
+      if (raw === null)
+        next.delete(key);
+      else
+        next.set(key, shellQuote(raw));
+    }
+  } else {
+    next = /* @__PURE__ */ new Map();
+    for (const [key, raw] of Object.entries(args.updates)) {
+      if (raw !== null)
+        next.set(key, shellQuote(raw));
+    }
+    const preserve = args.preserveKeys ?? PRESERVED_ENV_KEYS;
+    for (const key of preserve) {
+      if (key in args.updates)
+        continue;
+      if (!next.has(key) && current.has(key)) {
+        next.set(key, current.get(key));
+      }
+    }
+  }
+  return renderEnvIntegrations(next);
+}
+
+// ../../packages/core/dist/provisioning/mcp-config-guards.js
+import { chmodSync, existsSync, readFileSync, renameSync, writeFileSync, unlinkSync } from "fs";
+
+// ../../packages/core/dist/provisioning/mcp-secret-lint.js
+var LITERAL_SECRET_PATTERNS = [
+  // Slack bot token — `xoxb-<workspace>-<...>`
+  { name: "slack_bot_token", re: /^xoxb-/ },
+  // Slack app-level token (Socket Mode) — `xapp-<...>`
+  { name: "slack_app_token", re: /^xapp-/ },
+  // AGT host API key — `tlk_<...>` (see claudecode-plugin-augmented README).
+  { name: "agt_host_api_key", re: /^tlk_/ },
+  // Composio / generic api-key prefix — `ak_<...>`
+  { name: "composio_api_key", re: /^ak_/ },
+  // Telegram bot token — `<bot id>:AA<...>` (BotFather format). ENG-5901
+  // PR 4: the original `\d{10}:AAE` (from the issue AC) was too narrow —
+  // live tokens on agt-aws-1 carry `AA` + a varying third character
+  // (don/scout/stirling all had AA-not-E tokens the lint and migration
+  // missed). Bot ids are 8–12 digits; the token part always starts `AA`.
+  { name: "telegram_bot_token", re: /^\d{8,12}:AA[A-Za-z0-9_-]/ },
+  // ENG-5901 extension beyond the original AC's five patterns: a literal
+  // JWT (`eyJ...`) is the shape of a leaked AGT_API_KEY, which the
+  // value-prefix patterns above would otherwise miss. Header values often
+  // carry it behind `Bearer ` (or a copy-pasted `Authorization: Bearer `),
+  // so those prefixes are optionally consumed (CodeRabbit #1731).
+  // Templates (`Bearer ${AGT_API_KEY}`) and concrete non-secret values
+  // (UUIDs, hosts) never put `eyJ` after the prefix, so this stays
+  // false-positive-safe inside .mcp.json.
+  { name: "jwt_agt_api_key", re: /^(?:authorization:\s*)?(?:bearer\s+)?eyJ[A-Za-z0-9_-]+\./i }
+];
+function matchLiteralSecret(value) {
+  for (const { name, re } of LITERAL_SECRET_PATTERNS) {
+    if (re.test(value))
+      return name;
+  }
+  return null;
+}
+function scanRecord(server, record, location, findings) {
+  if (!record)
+    return;
+  for (const [field, value] of Object.entries(record)) {
+    if (typeof value !== "string")
+      continue;
+    const pattern = matchLiteralSecret(value);
+    if (pattern)
+      findings.push({ server, field, location, pattern });
+  }
+}
+function scanConfigForLiteralSecrets(config) {
+  const findings = [];
+  if (typeof config !== "object" || config === null)
+    return findings;
+  const servers = config.mcpServers;
+  if (typeof servers !== "object" || servers === null)
+    return findings;
+  for (const [server, raw] of Object.entries(servers)) {
+    if (typeof raw !== "object" || raw === null)
+      continue;
+    const entry = raw;
+    scanRecord(server, entry.env, "env", findings);
+    scanRecord(server, entry.headers, "header", findings);
+  }
+  return findings;
+}
+function formatLiteralSecretRejection(f) {
+  return `[mcp-write] [literal-secret-rejected] field=${f.field} server=${f.server} location=${f.location} pattern=${f.pattern}`;
+}
+
+// ../../packages/core/dist/provisioning/mcp-config-guards.js
+var MCP_FILE_MODE = 384;
+var lastRejectionFingerprintByPath = /* @__PURE__ */ new Map();
+var REQUIRED_ENV_RULES_BY_SERVER = {
+  "cloud-broker": [
+    { key: "AGT_HOST", mustBeConcrete: false },
+    { key: "AGT_API_KEY", mustBeConcrete: false },
+    // ENG-4744: this is the bug shape — writer used to omit this
+    // entirely, or render it as a literal `${AGT_AGENT_ID}` instead
+    // of the agent's real UUID. The broker has no way to substitute
+    // it post-spawn, so a placeholder here = silently broken agent.
+    { key: "AGT_AGENT_ID", mustBeConcrete: true }
+  ]
+};
+var PLACEHOLDER_RE = /\$\{[^}]+\}/;
+function validateRenderedMcpConfig(config) {
+  const errors = [];
+  if (typeof config !== "object" || config === null || Array.isArray(config)) {
+    return {
+      ok: false,
+      errors: [
+        {
+          kind: "invalid_json_shape",
+          server: "*",
+          message: "config root must be a non-null object"
+        }
+      ]
+    };
+  }
+  const root = config;
+  if (root.mcpServers === void 0) {
+    return { ok: true };
+  }
+  if (typeof root.mcpServers !== "object" || root.mcpServers === null) {
+    return {
+      ok: false,
+      errors: [
+        {
+          kind: "invalid_json_shape",
+          server: "*",
+          message: "mcpServers must be an object"
+        }
+      ]
+    };
+  }
+  if (Array.isArray(root.mcpServers)) {
+    return {
+      ok: false,
+      errors: [
+        {
+          kind: "invalid_json_shape",
+          server: "*",
+          message: "mcpServers must be an object"
+        }
+      ]
+    };
+  }
+  for (const [serverKey, raw] of Object.entries(root.mcpServers)) {
+    if (typeof raw !== "object" || raw === null || Array.isArray(raw)) {
+      errors.push({
+        kind: "invalid_json_shape",
+        server: serverKey,
+        message: `entry must be an object`
+      });
+      continue;
+    }
+    const entry = raw;
+    const entryRecord = entry;
+    if (typeof entryRecord["url"] === "string") {
+      const type = entryRecord["type"];
+      if (type !== "http" && type !== "sse") {
+        errors.push({
+          kind: "remote_mcp_missing_type",
+          server: serverKey,
+          message: `url-based entry must include \`type: "http"\` or \`type: "sse"\` (Claude Code MCP schema requires it)`
+        });
+      }
+    }
+    const rules = REQUIRED_ENV_RULES_BY_SERVER[serverKey];
+    if (rules) {
+      const env = entry.env ?? {};
+      for (const rule of rules) {
+        const value = env[rule.key];
+        if (typeof value !== "string" || value.length === 0) {
+          errors.push({
+            kind: "missing_required_env",
+            server: serverKey,
+            message: `missing required env key: ${rule.key}`
+          });
+          continue;
+        }
+        if (rule.mustBeConcrete && PLACEHOLDER_RE.test(value)) {
+          errors.push({
+            kind: "unexpanded_placeholder",
+            server: serverKey,
+            message: `env.${rule.key} contains an unexpanded \${...} placeholder; expected a concrete value`
+          });
+        }
+      }
+    }
+  }
+  return errors.length === 0 ? { ok: true } : { ok: false, errors };
+}
+function formatValidationErrors(errors) {
+  return errors.map((e) => `${e.server}:${e.kind}=${e.message}`).join("; ");
+}
+function safeWriteJsonAtomic(path, content, opts = {}) {
+  const keepBackup = opts.keepBackup !== false;
+  const rename = opts.renamer ?? renameSync;
+  const tmpPath = `${path}.new`;
+  const bakPath = `${path}.bak`;
+  let movedOriginalToBackup = false;
+  try {
+    writeFileSync(tmpPath, content);
+    if (opts.mode !== void 0) {
+      chmodSync(tmpPath, opts.mode);
+    }
+  } catch (err) {
+    try {
+      if (existsSync(tmpPath))
+        unlinkSync(tmpPath);
+    } catch {
+    }
+    throw err;
+  }
+  try {
+    if (keepBackup && existsSync(path)) {
+      rename(path, bakPath);
+      movedOriginalToBackup = true;
+    }
+    rename(tmpPath, path);
+  } catch (err) {
+    try {
+      if (existsSync(tmpPath))
+        unlinkSync(tmpPath);
+    } catch {
+    }
+    if (movedOriginalToBackup && !existsSync(path) && existsSync(bakPath)) {
+      try {
+        renameSync(bakPath, path);
+      } catch {
+      }
+    }
+    throw err;
+  }
+}
+function safeWriteMcpJson(path, config) {
+  const validation = validateRenderedMcpConfig(config);
+  if (!validation.ok) {
+    return { written: false, errors: validation.errors };
+  }
+  const secretFindings = scanConfigForLiteralSecrets(config);
+  if (secretFindings.length > 0) {
+    const fingerprint = secretFindings.map((f) => `${f.server}.${f.field}.${f.location}`).sort().join("|");
+    if (lastRejectionFingerprintByPath.get(path) !== fingerprint) {
+      lastRejectionFingerprintByPath.set(path, fingerprint);
+      for (const f of secretFindings) {
+        process.stderr.write(`${formatLiteralSecretRejection(f)}
+`);
+      }
+    }
+    return {
+      written: false,
+      errors: secretFindings.map((f) => ({
+        kind: "literal_secret",
+        server: f.server,
+        message: `literal secret in ${f.location} field '${f.field}' (pattern ${f.pattern}); expected a \${VAR} template`
+      }))
+    };
+  }
+  lastRejectionFingerprintByPath.delete(path);
+  safeWriteJsonAtomic(path, JSON.stringify(config, null, 2), { mode: MCP_FILE_MODE });
+  return { written: true, errors: [] };
+}
+var SECRET_FIELD_NAME_RE = /TOKEN|KEY|SECRET|BEARER|PASSWORD/i;
+function collectSecretFields(config) {
+  const out = /* @__PURE__ */ new Map();
+  if (typeof config !== "object" || config === null)
+    return out;
+  const servers = config.mcpServers;
+  if (typeof servers !== "object" || servers === null)
+    return out;
+  for (const [server, raw] of Object.entries(servers)) {
+    if (typeof raw !== "object" || raw === null)
+      continue;
+    const entry = raw;
+    for (const [block, location] of [
+      [entry.env, "env"],
+      [entry.headers, "header"]
+    ]) {
+      if (!block)
+        continue;
+      for (const [field, value] of Object.entries(block)) {
+        if (typeof value !== "string")
+          continue;
+        if (!SECRET_FIELD_NAME_RE.test(field))
+          continue;
+        out.set(`${server}\0${field}`, { location, value });
+      }
+    }
+  }
+  return out;
+}
+function mcpMirrorParityErrors(provision2, project) {
+  const a = collectSecretFields(provision2);
+  const b = collectSecretFields(project);
+  const mismatches = [];
+  const keys = /* @__PURE__ */ new Set([...a.keys(), ...b.keys()]);
+  for (const key of keys) {
+    const [server, field] = key.split("\0");
+    const pv = a.get(key);
+    const pj = b.get(key);
+    if (pv && !pj) {
+      mismatches.push({ server, field, location: pv.location, reason: "missing-in-project" });
+    } else if (!pv && pj) {
+      mismatches.push({ server, field, location: pj.location, reason: "missing-in-provision" });
+    } else if (pv && pj && pv.value !== pj.value) {
+      mismatches.push({ server, field, location: pv.location, reason: "value-diverges" });
     }
   }
-  return null;
+  return mismatches;
+}
+function formatMirrorMismatch(m) {
+  return `[mcp-mirror] [parity-violation] server=${m.server} field=${m.field} location=${m.location} reason=${m.reason}`;
 }
 
 // ../../packages/core/dist/provisioning/frameworks/openclaw/index.js
 import { execFile, spawn } from "child_process";
-import { readFileSync as readFileSync2, writeFileSync as writeFileSync2, mkdirSync as mkdirSync2, existsSync as existsSync2, unlinkSync as unlinkSync2, chmodSync as chmodSync2, renameSync as renameSync2, symlinkSync } from "fs";
+import { readFileSync as readFileSync3, writeFileSync as writeFileSync3, mkdirSync as mkdirSync2, existsSync as existsSync3, unlinkSync as unlinkSync3, chmodSync as chmodSync3, renameSync as renameSync3, symlinkSync } from "fs";
 import { join as join2, dirname as dirname2, resolve } from "path";
 
 // ../../packages/core/dist/integrations/xurl-config.js
-import { chmodSync, existsSync, mkdirSync, readFileSync, renameSync, unlinkSync, writeFileSync } from "fs";
+import { chmodSync as chmodSync2, existsSync as existsSync2, mkdirSync, readFileSync as readFileSync2, renameSync as renameSync2, unlinkSync as unlinkSync2, writeFileSync as writeFileSync2 } from "fs";
 import { homedir } from "os";
 import { dirname, join } from "path";
 import { parse as parseYaml, stringify as stringifyYaml } from "yaml";
@@ -594,10 +970,10 @@ function writeXurlStoreForIntegrations(integrations, filePath = getXurlStorePath
   if (Object.keys(agtApps).length === 0)
     return null;
   let existing = null;
-  if (existsSync(filePath)) {
+  if (existsSync2(filePath)) {
     let raw;
     try {
-      raw = readFileSync(filePath, "utf-8");
+      raw = readFileSync2(filePath, "utf-8");
     } catch {
       return null;
     }
@@ -610,18 +986,18 @@ function writeXurlStoreForIntegrations(integrations, filePath = getXurlStorePath
   const merged = mergeXurlStore(existing, agtApps);
   mkdirSync(dirname(filePath), { recursive: true });
   const tmpPath = `${filePath}.tmp-${process.pid}-${Date.now()}`;
-  writeFileSync(tmpPath, serializeXurlStore(merged), { mode: XURL_FILE_MODE });
+  writeFileSync2(tmpPath, serializeXurlStore(merged), { mode: XURL_FILE_MODE });
   try {
-    renameSync(tmpPath, filePath);
+    renameSync2(tmpPath, filePath);
   } catch (err) {
     try {
-      unlinkSync(tmpPath);
+      unlinkSync2(tmpPath);
     } catch {
     }
     throw err;
   }
   try {
-    chmodSync(filePath, XURL_FILE_MODE);
+    chmodSync2(filePath, XURL_FILE_MODE);
   } catch {
   }
   return filePath;
@@ -1044,9 +1420,9 @@ function writeIntegrationTokenFile(codeName, integrations) {
   if (Object.keys(tokens).length === 0)
     return;
   mkdirSync2(dir, { recursive: true });
-  writeFileSync2(tmpFilePath, JSON.stringify(tokens, null, 2));
-  chmodSync2(tmpFilePath, 384);
-  renameSync2(tmpFilePath, tokenFilePath);
+  writeFileSync3(tmpFilePath, JSON.stringify(tokens, null, 2));
+  chmodSync3(tmpFilePath, 384);
+  renameSync3(tmpFilePath, tokenFilePath);
 }
 function getOpenClawConfigPath(profile) {
   const homeDir = getHomeDir();
@@ -1060,7 +1436,7 @@ function modifyOpenClawConfig(fn, profile) {
   let originalContent;
   let config;
   try {
-    originalContent = readFileSync2(configFile, "utf-8");
+    originalContent = readFileSync3(configFile, "utf-8");
     config = JSON.parse(originalContent);
   } catch {
     return;
@@ -1071,7 +1447,7 @@ function modifyOpenClawConfig(fn, profile) {
   const newContent = JSON.stringify(config, null, 2);
   if (newContent === originalContent)
     return;
-  writeFileSync2(configFile, newContent);
+  writeFileSync3(configFile, newContent);
 }
 var AUGMENTED_DIR = join2(getHomeDir(), ".augmented");
 function getGatewayPidPath(codeName) {
@@ -1085,7 +1461,7 @@ function getGatewayPortsPath() {
 }
 function readGatewayPid(codeName) {
   try {
-    const raw = readFileSync2(getGatewayPidPath(codeName), "utf-8").trim();
+    const raw = readFileSync3(getGatewayPidPath(codeName), "utf-8").trim();
     const pid = parseInt(raw, 10);
     return isNaN(pid) ? null : pid;
   } catch {
@@ -1133,7 +1509,7 @@ function execPromise(cmd, args) {
 }
 function readGatewayPorts() {
   try {
-    return JSON.parse(readFileSync2(getGatewayPortsPath(), "utf-8"));
+    return JSON.parse(readFileSync3(getGatewayPortsPath(), "utf-8"));
   } catch {
     return {};
   }
@@ -1369,7 +1745,7 @@ ${entry.content}`
     const configFile = getOpenClawConfigPath(codeName);
     let raw;
     try {
-      raw = readFileSync2(configFile, "utf-8");
+      raw = readFileSync3(configFile, "utf-8");
     } catch {
       return false;
     }
@@ -1438,7 +1814,7 @@ ${entry.content}`
     const authFile = join2(authDir, "auth-profiles.json");
     let existing = {};
     try {
-      existing = JSON.parse(readFileSync2(authFile, "utf-8"));
+      existing = JSON.parse(readFileSync3(authFile, "utf-8"));
     } catch {
     }
     const existingProfiles = existing["profiles"] ?? {};
@@ -1460,7 +1836,7 @@ ${entry.content}`
       usageStats: existing["usageStats"] ?? {}
     };
     mkdirSync2(authDir, { recursive: true });
-    writeFileSync2(authFile, JSON.stringify(output, null, 2));
+    writeFileSync3(authFile, JSON.stringify(output, null, 2));
   },
   async startGateway(codeName, port) {
     const agentAugDir = join2(AUGMENTED_DIR, codeName);
@@ -1497,7 +1873,7 @@ ${entry.content}`
         }
       }
     }
-    writeFileSync2(pidPath, String(gatewayPid));
+    writeFileSync3(pidPath, String(gatewayPid));
     return { pid: gatewayPid, port };
   },
   async stopGateway(codeName) {
@@ -1506,7 +1882,7 @@ ${entry.content}`
       return false;
     if (!isProcessAlive(pid)) {
       try {
-        unlinkSync2(getGatewayPidPath(codeName));
+        unlinkSync3(getGatewayPidPath(codeName));
       } catch {
       }
       return false;
@@ -1521,7 +1897,7 @@ ${entry.content}`
       await new Promise((r) => setTimeout(r, 200));
       if (!isProcessAlive(pid)) {
         try {
-          unlinkSync2(getGatewayPidPath(codeName));
+          unlinkSync3(getGatewayPidPath(codeName));
         } catch {
         }
         return true;
@@ -1532,7 +1908,7 @@ ${entry.content}`
     } catch {
     }
     try {
-      unlinkSync2(getGatewayPidPath(codeName));
+      unlinkSync3(getGatewayPidPath(codeName));
     } catch {
     }
     return true;
@@ -1549,7 +1925,7 @@ ${entry.content}`
       if (portPid) {
         try {
           const pidPath = getGatewayPidPath(codeName);
-          writeFileSync2(pidPath, String(portPid));
+          writeFileSync3(pidPath, String(portPid));
         } catch {
         }
         return { running: true, pid: portPid, port };
@@ -1557,7 +1933,7 @@ ${entry.content}`
     }
     if (pid) {
       try {
-        unlinkSync2(getGatewayPidPath(codeName));
+        unlinkSync3(getGatewayPidPath(codeName));
       } catch {
       }
     }
@@ -1570,13 +1946,13 @@ ${entry.content}`
     const profileConfigPath = join2(profileDir, "openclaw.json");
     let sharedConfig;
     try {
-      sharedConfig = JSON.parse(readFileSync2(sharedConfigPath, "utf-8"));
+      sharedConfig = JSON.parse(readFileSync3(sharedConfigPath, "utf-8"));
     } catch {
       sharedConfig = {};
     }
-    if (existsSync2(profileConfigPath)) {
+    if (existsSync3(profileConfigPath)) {
       try {
-        const existing = JSON.parse(readFileSync2(profileConfigPath, "utf-8"));
+        const existing = JSON.parse(readFileSync3(profileConfigPath, "utf-8"));
         let changed = false;
         if (!existing["gateway"]) {
           if (sharedConfig["gateway"]) {
@@ -1594,7 +1970,7 @@ ${entry.content}`
           changed = true;
         }
         if (changed) {
-          writeFileSync2(profileConfigPath, JSON.stringify(existing, null, 2));
+          writeFileSync3(profileConfigPath, JSON.stringify(existing, null, 2));
         }
       } catch {
       }
@@ -1641,13 +2017,13 @@ ${entry.content}`
       }
     };
     mkdirSync2(profileDir, { recursive: true });
-    writeFileSync2(profileConfigPath, JSON.stringify(profileConfig, null, 2));
+    writeFileSync3(profileConfigPath, JSON.stringify(profileConfig, null, 2));
     const agentAuthDir = join2(profileDir, "agents", codeName, "agent");
     const mainAgentDir = join2(profileDir, "agents", "main", "agent");
     try {
       mkdirSync2(agentAuthDir, { recursive: true });
       mkdirSync2(join2(profileDir, "agents", "main"), { recursive: true });
-      if (!existsSync2(mainAgentDir)) {
+      if (!existsSync3(mainAgentDir)) {
         symlinkSync(agentAuthDir, mainAgentDir, "dir");
       }
     } catch {
@@ -1661,7 +2037,7 @@ ${entry.content}`
       const authFile = join2(authDir, "auth-profiles.json");
       let existing = {};
       try {
-        existing = JSON.parse(readFileSync2(authFile, "utf-8"));
+        existing = JSON.parse(readFileSync3(authFile, "utf-8"));
       } catch {
       }
       const existingProfiles = existing["profiles"] ?? {};
@@ -1673,7 +2049,7 @@ ${entry.content}`
         usageStats: existing["usageStats"] ?? {}
       };
       mkdirSync2(authDir, { recursive: true });
-      writeFileSync2(authFile, JSON.stringify(output, null, 2));
+      writeFileSync3(authFile, JSON.stringify(output, null, 2));
     }
     if (integrationConfig.toolAllow.length > 0) {
       modifyOpenClawConfig((config) => {
@@ -1796,7 +2172,7 @@ ${entry.content}`
     for (const file of files) {
       const filePath = join2(skillDir, file.relativePath);
       mkdirSync2(dirname2(filePath), { recursive: true });
-      writeFileSync2(filePath, file.content);
+      writeFileSync3(filePath, file.content);
     }
   },
   writeMcpServer(codeName, serverId, config) {
@@ -1892,7 +2268,7 @@ ${entry.content}`
   readGatewayToken(codeName) {
     const homeDir = getHomeDir();
     try {
-      const config = JSON.parse(readFileSync2(join2(homeDir, `.openclaw-${codeName}`, "openclaw.json"), "utf-8"));
+      const config = JSON.parse(readFileSync3(join2(homeDir, `.openclaw-${codeName}`, "openclaw.json"), "utf-8"));
       return config?.gateway?.auth?.token;
     } catch {
       return void 0;
@@ -2033,7 +2409,7 @@ ${entry.content}`
 registerFramework(openclawAdapter);
 
 // ../../packages/core/dist/provisioning/frameworks/nemoclaw/index.js
-import { readFileSync as readFileSync3, writeFileSync as writeFileSync3, mkdirSync as mkdirSync3, existsSync as existsSync3, chmodSync as chmodSync3 } from "fs";
+import { readFileSync as readFileSync4, writeFileSync as writeFileSync4, mkdirSync as mkdirSync3, existsSync as existsSync4, chmodSync as chmodSync4 } from "fs";
 import { join as join3, dirname as dirname3, resolve as resolve2, sep } from "path";
 import { homedir as homedir2 } from "os";
 import { execFile as execFile2 } from "child_process";
@@ -2056,9 +2432,9 @@ function ensureDir(dir) {
 }
 function readDeploymentTarget(codeName) {
   const targetFile = join3(getConfigDir(codeName), "target.json");
-  if (!existsSync3(targetFile))
+  if (!existsSync4(targetFile))
     return null;
-  return JSON.parse(readFileSync3(targetFile, "utf-8"));
+  return JSON.parse(readFileSync4(targetFile, "utf-8"));
 }
 async function sshExec(target, command, options) {
   const sshArgs = [
@@ -2096,7 +2472,7 @@ async function syncLocalAssetsToRemote(codeName) {
   if (!target)
     return;
   const localAssetsDir = getConfigDir(codeName);
-  if (!existsSync3(localAssetsDir))
+  if (!existsSync4(localAssetsDir))
     return;
   const remoteDir = `/opt/augmented/${codeName}`;
   const remoteAssetsDir = `${remoteDir}/assets`;
@@ -2200,7 +2576,7 @@ var nemoClawAdapter = {
       await scpPush(target, blueprintPath, `${remoteDir}/blueprint.json`);
       for (const file of ["CHARTER.md", "TOOLS.md"]) {
         const localPath = join3(teamDir, file);
-        if (existsSync3(localPath)) {
+        if (existsSync4(localPath)) {
           await scpPush(target, localPath, `${remoteDir}/${file}`);
         }
       }
@@ -2229,7 +2605,7 @@ var nemoClawAdapter = {
     const configDir = getConfigDir(codeName);
     ensureDir(configDir);
     const authFile = join3(configDir, "auth-profiles.json");
-    const existing = existsSync3(authFile) ? JSON.parse(readFileSync3(authFile, "utf-8")) : {};
+    const existing = existsSync4(authFile) ? JSON.parse(readFileSync4(authFile, "utf-8")) : {};
     for (const profile of profiles) {
       const previous = existing[profile.profile_name];
       existing[profile.profile_name] = {
@@ -2240,7 +2616,7 @@ var nemoClawAdapter = {
         ...profile.metadata
       };
     }
-    writeFileSync3(authFile, JSON.stringify(existing, null, 2), { mode: 384 });
+    writeFileSync4(authFile, JSON.stringify(existing, null, 2), { mode: 384 });
     syncLocalAssetsToRemote(codeName).catch(() => {
     });
   },
@@ -2262,7 +2638,7 @@ var nemoClawAdapter = {
     }
     const configDir = getConfigDir(codeName);
     ensureDir(configDir);
-    writeFileSync3(join3(configDir, "gateway.json"), JSON.stringify({
+    writeFileSync4(join3(configDir, "gateway.json"), JSON.stringify({
       pid: result.pid,
       port: result.port,
       host: target.host,
@@ -2299,7 +2675,7 @@ var nemoClawAdapter = {
   readGatewayToken(codeName) {
     try {
       const gatewayFile = join3(getConfigDir(codeName), "gateway.json");
-      const config = JSON.parse(readFileSync3(gatewayFile, "utf-8"));
+      const config = JSON.parse(readFileSync4(gatewayFile, "utf-8"));
       return config?.token;
     } catch {
       return void 0;
@@ -2314,364 +2690,71 @@ var nemoClawAdapter = {
       const creds = decryptIntegrationCredentials(integration.credentials);
       const apiKey = creds.api_key ?? creds.access_token;
       if (apiKey) {
-        const envKey = `INTEGRATION_${integration.definition_id.toUpperCase().replace(/-/g, "_")}_KEY`;
-        env[envKey] = apiKey;
-      }
-    }
-    writeFileSync3(envFile, JSON.stringify(env, null, 2), { mode: 384 });
-    syncLocalAssetsToRemote(codeName).catch(() => {
-    });
-  },
-  installSkillFiles(codeName, skillId, files) {
-    if (!/^[a-zA-Z0-9_-]+$/.test(skillId)) {
-      throw new Error(`Invalid skill ID: ${skillId}`);
-    }
-    const skillDir = resolve2(getConfigDir(codeName), "skills", skillId);
-    for (const file of files) {
-      const filePath = resolve2(skillDir, file.relativePath);
-      if (!filePath.startsWith(`${skillDir}${sep}`)) {
-        throw new Error(`Invalid skill path: ${file.relativePath}`);
-      }
-      mkdirSync3(dirname3(filePath), { recursive: true });
-      writeFileSync3(filePath, file.content);
-    }
-    syncLocalAssetsToRemote(codeName).catch(() => {
-    });
-  },
-  writeMcpServer(codeName, serverId, config) {
-    const configDir = getConfigDir(codeName);
-    ensureDir(configDir);
-    const mcpFile = join3(configDir, "mcp-servers.json");
-    const existing = existsSync3(mcpFile) ? JSON.parse(readFileSync3(mcpFile, "utf-8")) : {};
-    existing[serverId] = config;
-    writeFileSync3(mcpFile, JSON.stringify(existing, null, 2), { mode: 384 });
-    chmodSync3(mcpFile, 384);
-    syncLocalAssetsToRemote(codeName).catch(() => {
-    });
-  },
-  async syncScheduledTasks(codeName, tasks, gatewayPort) {
-    const target = readDeploymentTarget(codeName);
-    if (!target)
-      return;
-    const configDir = getConfigDir(codeName);
-    ensureDir(configDir);
-    const tasksFile = join3(configDir, "scheduled-tasks.json");
-    writeFileSync3(tasksFile, JSON.stringify(tasks, null, 2));
-    try {
-      const remoteDir = `/opt/augmented/${codeName}`;
-      await scpPush(target, tasksFile, `${remoteDir}/scheduled-tasks.json`);
-      await sshExec(target, `nemoclaw cron sync ${codeName} --config ${remoteDir}/scheduled-tasks.json`);
-    } catch {
-    }
-  }
-};
-function extractAllowedDomains(input) {
-  const domains = /* @__PURE__ */ new Set();
-  const controlPlaneHost = process.env["AGT_HOST"] ? new URL(process.env["AGT_HOST"]).hostname : "api.agt.localhost";
-  domains.add(controlPlaneHost);
-  for (const tool of input.toolsFrontmatter.tools) {
-    if (tool.network?.allowlist_domains) {
-      for (const domain of tool.network.allowlist_domains) {
-        domains.add(domain);
-      }
-    }
-  }
-  return [...domains];
-}
-registerFramework(nemoClawAdapter);
-
-// ../../packages/core/dist/provisioning/mcp-config-guards.js
-import { chmodSync as chmodSync4, existsSync as existsSync4, readFileSync as readFileSync4, renameSync as renameSync3, writeFileSync as writeFileSync4, unlinkSync as unlinkSync3 } from "fs";
-
-// ../../packages/core/dist/provisioning/mcp-secret-lint.js
-var LITERAL_SECRET_PATTERNS = [
-  // Slack bot token — `xoxb-<workspace>-<...>`
-  { name: "slack_bot_token", re: /^xoxb-/ },
-  // Slack app-level token (Socket Mode) — `xapp-<...>`
-  { name: "slack_app_token", re: /^xapp-/ },
-  // AGT host API key — `tlk_<...>` (see claudecode-plugin-augmented README).
-  { name: "agt_host_api_key", re: /^tlk_/ },
-  // Composio / generic api-key prefix — `ak_<...>`
-  { name: "composio_api_key", re: /^ak_/ },
-  // Telegram bot token — `<bot id>:AA<...>` (BotFather format). ENG-5901
-  // PR 4: the original `\d{10}:AAE` (from the issue AC) was too narrow —
-  // live tokens on agt-aws-1 carry `AA` + a varying third character
-  // (don/scout/stirling all had AA-not-E tokens the lint and migration
-  // missed). Bot ids are 8–12 digits; the token part always starts `AA`.
-  { name: "telegram_bot_token", re: /^\d{8,12}:AA[A-Za-z0-9_-]/ },
-  // ENG-5901 extension beyond the original AC's five patterns: a literal
-  // JWT (`eyJ...`) is the shape of a leaked AGT_API_KEY, which the
-  // value-prefix patterns above would otherwise miss. Header values often
-  // carry it behind `Bearer ` (or a copy-pasted `Authorization: Bearer `),
-  // so those prefixes are optionally consumed (CodeRabbit #1731).
-  // Templates (`Bearer ${AGT_API_KEY}`) and concrete non-secret values
-  // (UUIDs, hosts) never put `eyJ` after the prefix, so this stays
-  // false-positive-safe inside .mcp.json.
-  { name: "jwt_agt_api_key", re: /^(?:authorization:\s*)?(?:bearer\s+)?eyJ[A-Za-z0-9_-]+\./i }
-];
-function matchLiteralSecret(value) {
-  for (const { name, re } of LITERAL_SECRET_PATTERNS) {
-    if (re.test(value))
-      return name;
-  }
-  return null;
-}
-function scanRecord(server, record, location, findings) {
-  if (!record)
-    return;
-  for (const [field, value] of Object.entries(record)) {
-    if (typeof value !== "string")
-      continue;
-    const pattern = matchLiteralSecret(value);
-    if (pattern)
-      findings.push({ server, field, location, pattern });
-  }
-}
-function scanConfigForLiteralSecrets(config) {
-  const findings = [];
-  if (typeof config !== "object" || config === null)
-    return findings;
-  const servers = config.mcpServers;
-  if (typeof servers !== "object" || servers === null)
-    return findings;
-  for (const [server, raw] of Object.entries(servers)) {
-    if (typeof raw !== "object" || raw === null)
-      continue;
-    const entry = raw;
-    scanRecord(server, entry.env, "env", findings);
-    scanRecord(server, entry.headers, "header", findings);
-  }
-  return findings;
-}
-function formatLiteralSecretRejection(f) {
-  return `[mcp-write] [literal-secret-rejected] field=${f.field} server=${f.server} location=${f.location} pattern=${f.pattern}`;
-}
-
-// ../../packages/core/dist/provisioning/mcp-config-guards.js
-var MCP_FILE_MODE = 384;
-var lastRejectionFingerprintByPath = /* @__PURE__ */ new Map();
-var REQUIRED_ENV_RULES_BY_SERVER = {
-  "cloud-broker": [
-    { key: "AGT_HOST", mustBeConcrete: false },
-    { key: "AGT_API_KEY", mustBeConcrete: false },
-    // ENG-4744: this is the bug shape — writer used to omit this
-    // entirely, or render it as a literal `${AGT_AGENT_ID}` instead
-    // of the agent's real UUID. The broker has no way to substitute
-    // it post-spawn, so a placeholder here = silently broken agent.
-    { key: "AGT_AGENT_ID", mustBeConcrete: true }
-  ]
-};
-var PLACEHOLDER_RE = /\$\{[^}]+\}/;
-function validateRenderedMcpConfig(config) {
-  const errors = [];
-  if (typeof config !== "object" || config === null || Array.isArray(config)) {
-    return {
-      ok: false,
-      errors: [
-        {
-          kind: "invalid_json_shape",
-          server: "*",
-          message: "config root must be a non-null object"
-        }
-      ]
-    };
-  }
-  const root = config;
-  if (root.mcpServers === void 0) {
-    return { ok: true };
-  }
-  if (typeof root.mcpServers !== "object" || root.mcpServers === null) {
-    return {
-      ok: false,
-      errors: [
-        {
-          kind: "invalid_json_shape",
-          server: "*",
-          message: "mcpServers must be an object"
-        }
-      ]
-    };
-  }
-  if (Array.isArray(root.mcpServers)) {
-    return {
-      ok: false,
-      errors: [
-        {
-          kind: "invalid_json_shape",
-          server: "*",
-          message: "mcpServers must be an object"
-        }
-      ]
-    };
-  }
-  for (const [serverKey, raw] of Object.entries(root.mcpServers)) {
-    if (typeof raw !== "object" || raw === null || Array.isArray(raw)) {
-      errors.push({
-        kind: "invalid_json_shape",
-        server: serverKey,
-        message: `entry must be an object`
-      });
-      continue;
-    }
-    const entry = raw;
-    const entryRecord = entry;
-    if (typeof entryRecord["url"] === "string") {
-      const type = entryRecord["type"];
-      if (type !== "http" && type !== "sse") {
-        errors.push({
-          kind: "remote_mcp_missing_type",
-          server: serverKey,
-          message: `url-based entry must include \`type: "http"\` or \`type: "sse"\` (Claude Code MCP schema requires it)`
-        });
-      }
-    }
-    const rules = REQUIRED_ENV_RULES_BY_SERVER[serverKey];
-    if (rules) {
-      const env = entry.env ?? {};
-      for (const rule of rules) {
-        const value = env[rule.key];
-        if (typeof value !== "string" || value.length === 0) {
-          errors.push({
-            kind: "missing_required_env",
-            server: serverKey,
-            message: `missing required env key: ${rule.key}`
-          });
-          continue;
-        }
-        if (rule.mustBeConcrete && PLACEHOLDER_RE.test(value)) {
-          errors.push({
-            kind: "unexpanded_placeholder",
-            server: serverKey,
-            message: `env.${rule.key} contains an unexpanded \${...} placeholder; expected a concrete value`
-          });
-        }
-      }
-    }
-  }
-  return errors.length === 0 ? { ok: true } : { ok: false, errors };
-}
-function formatValidationErrors(errors) {
-  return errors.map((e) => `${e.server}:${e.kind}=${e.message}`).join("; ");
-}
-function safeWriteJsonAtomic(path, content, opts = {}) {
-  const keepBackup = opts.keepBackup !== false;
-  const rename = opts.renamer ?? renameSync3;
-  const tmpPath = `${path}.new`;
-  const bakPath = `${path}.bak`;
-  let movedOriginalToBackup = false;
-  try {
-    writeFileSync4(tmpPath, content);
-    if (opts.mode !== void 0) {
-      chmodSync4(tmpPath, opts.mode);
-    }
-  } catch (err) {
-    try {
-      if (existsSync4(tmpPath))
-        unlinkSync3(tmpPath);
-    } catch {
-    }
-    throw err;
-  }
-  try {
-    if (keepBackup && existsSync4(path)) {
-      rename(path, bakPath);
-      movedOriginalToBackup = true;
+        const envKey = `INTEGRATION_${integration.definition_id.toUpperCase().replace(/-/g, "_")}_KEY`;
+        env[envKey] = apiKey;
+      }
     }
-    rename(tmpPath, path);
-  } catch (err) {
-    try {
-      if (existsSync4(tmpPath))
-        unlinkSync3(tmpPath);
-    } catch {
+    writeFileSync4(envFile, JSON.stringify(env, null, 2), { mode: 384 });
+    syncLocalAssetsToRemote(codeName).catch(() => {
+    });
+  },
+  installSkillFiles(codeName, skillId, files) {
+    if (!/^[a-zA-Z0-9_-]+$/.test(skillId)) {
+      throw new Error(`Invalid skill ID: ${skillId}`);
     }
-    if (movedOriginalToBackup && !existsSync4(path) && existsSync4(bakPath)) {
-      try {
-        renameSync3(bakPath, path);
-      } catch {
+    const skillDir = resolve2(getConfigDir(codeName), "skills", skillId);
+    for (const file of files) {
+      const filePath = resolve2(skillDir, file.relativePath);
+      if (!filePath.startsWith(`${skillDir}${sep}`)) {
+        throw new Error(`Invalid skill path: ${file.relativePath}`);
       }
+      mkdirSync3(dirname3(filePath), { recursive: true });
+      writeFileSync4(filePath, file.content);
     }
-    throw err;
-  }
-}
-function safeWriteMcpJson(path, config) {
-  const validation = validateRenderedMcpConfig(config);
-  if (!validation.ok) {
-    return { written: false, errors: validation.errors };
-  }
-  const secretFindings = scanConfigForLiteralSecrets(config);
-  if (secretFindings.length > 0) {
-    const fingerprint = secretFindings.map((f) => `${f.server}.${f.field}.${f.location}`).sort().join("|");
-    if (lastRejectionFingerprintByPath.get(path) !== fingerprint) {
-      lastRejectionFingerprintByPath.set(path, fingerprint);
-      for (const f of secretFindings) {
-        process.stderr.write(`${formatLiteralSecretRejection(f)}
-`);
-      }
+    syncLocalAssetsToRemote(codeName).catch(() => {
+    });
+  },
+  writeMcpServer(codeName, serverId, config) {
+    const configDir = getConfigDir(codeName);
+    ensureDir(configDir);
+    const mcpFile = join3(configDir, "mcp-servers.json");
+    const existing = existsSync4(mcpFile) ? JSON.parse(readFileSync4(mcpFile, "utf-8")) : {};
+    existing[serverId] = config;
+    writeFileSync4(mcpFile, JSON.stringify(existing, null, 2), { mode: 384 });
+    chmodSync4(mcpFile, 384);
+    syncLocalAssetsToRemote(codeName).catch(() => {
+    });
+  },
+  async syncScheduledTasks(codeName, tasks, gatewayPort) {
+    const target = readDeploymentTarget(codeName);
+    if (!target)
+      return;
+    const configDir = getConfigDir(codeName);
+    ensureDir(configDir);
+    const tasksFile = join3(configDir, "scheduled-tasks.json");
+    writeFileSync4(tasksFile, JSON.stringify(tasks, null, 2));
+    try {
+      const remoteDir = `/opt/augmented/${codeName}`;
+      await scpPush(target, tasksFile, `${remoteDir}/scheduled-tasks.json`);
+      await sshExec(target, `nemoclaw cron sync ${codeName} --config ${remoteDir}/scheduled-tasks.json`);
+    } catch {
     }
-    return {
-      written: false,
-      errors: secretFindings.map((f) => ({
-        kind: "literal_secret",
-        server: f.server,
-        message: `literal secret in ${f.location} field '${f.field}' (pattern ${f.pattern}); expected a \${VAR} template`
-      }))
-    };
   }
-  lastRejectionFingerprintByPath.delete(path);
-  safeWriteJsonAtomic(path, JSON.stringify(config, null, 2), { mode: MCP_FILE_MODE });
-  return { written: true, errors: [] };
-}
-var SECRET_FIELD_NAME_RE = /TOKEN|KEY|SECRET|BEARER|PASSWORD/i;
-function collectSecretFields(config) {
-  const out = /* @__PURE__ */ new Map();
-  if (typeof config !== "object" || config === null)
-    return out;
-  const servers = config.mcpServers;
-  if (typeof servers !== "object" || servers === null)
-    return out;
-  for (const [server, raw] of Object.entries(servers)) {
-    if (typeof raw !== "object" || raw === null)
-      continue;
-    const entry = raw;
-    for (const [block, location] of [
-      [entry.env, "env"],
-      [entry.headers, "header"]
-    ]) {
-      if (!block)
-        continue;
-      for (const [field, value] of Object.entries(block)) {
-        if (typeof value !== "string")
-          continue;
-        if (!SECRET_FIELD_NAME_RE.test(field))
-          continue;
-        out.set(`${server}\0${field}`, { location, value });
+};
+function extractAllowedDomains(input) {
+  const domains = /* @__PURE__ */ new Set();
+  const controlPlaneHost = process.env["AGT_HOST"] ? new URL(process.env["AGT_HOST"]).hostname : "api.agt.localhost";
+  domains.add(controlPlaneHost);
+  for (const tool of input.toolsFrontmatter.tools) {
+    if (tool.network?.allowlist_domains) {
+      for (const domain of tool.network.allowlist_domains) {
+        domains.add(domain);
       }
     }
   }
-  return out;
-}
-function mcpMirrorParityErrors(provision2, project) {
-  const a = collectSecretFields(provision2);
-  const b = collectSecretFields(project);
-  const mismatches = [];
-  const keys = /* @__PURE__ */ new Set([...a.keys(), ...b.keys()]);
-  for (const key of keys) {
-    const [server, field] = key.split("\0");
-    const pv = a.get(key);
-    const pj = b.get(key);
-    if (pv && !pj) {
-      mismatches.push({ server, field, location: pv.location, reason: "missing-in-project" });
-    } else if (!pv && pj) {
-      mismatches.push({ server, field, location: pj.location, reason: "missing-in-provision" });
-    } else if (pv && pj && pv.value !== pj.value) {
-      mismatches.push({ server, field, location: pv.location, reason: "value-diverges" });
-    }
-  }
-  return mismatches;
-}
-function formatMirrorMismatch(m) {
-  return `[mcp-mirror] [parity-violation] server=${m.server} field=${m.field} location=${m.location} reason=${m.reason}`;
+  return [...domains];
 }
+registerFramework(nemoClawAdapter);
 
 // ../../packages/core/dist/provisioning/frameworks/claudecode/identity.js
 function buildMemorySection(hasQmd) {
@@ -3787,70 +3870,6 @@ The marginal cost of completeness is near zero. Do the whole thing.
 ${frontmatter.environment === "prod" ? "- Production environment: exercise extra caution with all operations.\n" : ""}`;
 }
 
-// ../../packages/core/dist/provisioning/env-integrations-file.js
-function shellQuote(value) {
-  return `'${value.replace(/'/g, `'\\''`)}'`;
-}
-var CHANNEL_SECRET_ENV_KEYS = [
-  "SLACK_BOT_TOKEN",
-  "SLACK_APP_TOKEN",
-  "TELEGRAM_BOT_TOKEN",
-  "MSTEAMS_CLIENT_SECRET"
-];
-var MCP_SERVER_SECRET_ENV_KEYS = [
-  "COMPOSIO_API_KEY",
-  "PIPEDREAM_CLIENT_SECRET"
-];
-var PRESERVED_ENV_KEYS = [
-  ...CHANNEL_SECRET_ENV_KEYS,
-  ...MCP_SERVER_SECRET_ENV_KEYS
-];
-var HEADER = "# Augmented integrations \u2014 auto-generated, do not edit";
-function parseEnvFileEntries(content) {
-  const out = /* @__PURE__ */ new Map();
-  for (const line of content.split("\n")) {
-    if (!line || line.startsWith("#") || !line.includes("="))
-      continue;
-    const eqIdx = line.indexOf("=");
-    out.set(line.slice(0, eqIdx), line.slice(eqIdx + 1));
-  }
-  return out;
-}
-function renderEnvIntegrations(entries) {
-  const lines = [HEADER];
-  for (const [key, rendered] of entries)
-    lines.push(`${key}=${rendered}`);
-  return lines.join("\n") + "\n";
-}
-function mergeEnvIntegrationsContent(existing, args) {
-  const current = existing === null ? /* @__PURE__ */ new Map() : parseEnvFileEntries(existing);
-  let next;
-  if (args.mode === "upsert") {
-    next = new Map(current);
-    for (const [key, raw] of Object.entries(args.updates)) {
-      if (raw === null)
-        next.delete(key);
-      else
-        next.set(key, shellQuote(raw));
-    }
-  } else {
-    next = /* @__PURE__ */ new Map();
-    for (const [key, raw] of Object.entries(args.updates)) {
-      if (raw !== null)
-        next.set(key, shellQuote(raw));
-    }
-    const preserve = args.preserveKeys ?? PRESERVED_ENV_KEYS;
-    for (const key of preserve) {
-      if (key in args.updates)
-        continue;
-      if (!next.has(key) && current.has(key)) {
-        next.set(key, current.get(key));
-      }
-    }
-  }
-  return renderEnvIntegrations(next);
-}
-
 // ../../packages/core/dist/provisioning/frameworks/claudecode/index.js
 import { readFileSync as readFileSync5, writeFileSync as writeFileSync5, mkdirSync as mkdirSync4, existsSync as existsSync5, chmodSync as chmodSync5, readdirSync, rmSync, copyFileSync } from "fs";
 import { join as join4, relative, dirname as dirname4 } from "path";
@@ -5054,6 +5073,12 @@ function buildMcpJson(input) {
       // dashboard links) in tool replies. Falls back to NEXT_PUBLIC_APP_URL
       // / AGT_CONSOLE_URL — same chain consoleUrl uses for kanban links.
       AGT_APP_URL: process.env["AGT_APP_URL"] ?? process.env["NEXT_PUBLIC_APP_URL"] ?? process.env["AGT_CONSOLE_URL"] ?? "",
+      // ENG-6229: arms the in-session `request_restart` self-restart tool.
+      // Read at provision time from the manager's env (like AGT_HOST above),
+      // NOT a per-spawn `${...}` template — it's a host-level gate. Empty by
+      // default ⇒ the tool isn't registered at all (ships dark). When an
+      // operator sets it on the host, the next /host/refresh bakes it in.
+      AGT_AGENT_SELF_RESTART_ENABLED: process.env["AGT_AGENT_SELF_RESTART_ENABLED"] ?? "",
       // Include PATH/HOME so the MCP subprocess can resolve binaries
       PATH: process.env["PATH"] ?? "",
       HOME: process.env["HOME"] ?? ""
@@ -6785,22 +6810,6 @@ var ManagedAgentsAdapter = {
 };
 registerFramework(ManagedAgentsAdapter);
 
-// src/lib/globals.ts
-import chalk from "chalk";
-var _jsonMode = false;
-function setJsonMode(enabled) {
-  _jsonMode = enabled;
-  if (enabled) {
-    chalk.level = 0;
-  }
-}
-function isJsonMode() {
-  return _jsonMode;
-}
-function jsonOutput(data) {
-  console.log(JSON.stringify(data, null, 2));
-}
-
 // src/lib/config.ts
 import { readFileSync as readFileSync6, writeFileSync as writeFileSync6, mkdirSync as mkdirSync5, existsSync as existsSync6 } from "fs";
 import { join as join6 } from "path";
@@ -7052,23 +7061,20 @@ async function getHostId() {
   return hostId;
 }
 
-// ../../packages/core/dist/provisioning/provisioner.js
-import { createHash } from "crypto";
-function sha256(content) {
-  return createHash("sha256").update(content, "utf8").digest("hex");
+// src/lib/globals.ts
+import chalk from "chalk";
+var _jsonMode = false;
+function setJsonMode(enabled) {
+  _jsonMode = enabled;
+  if (enabled) {
+    chalk.level = 0;
+  }
 }
-function provision(input, frameworkId = "openclaw") {
-  const adapter = getFramework(frameworkId);
-  const artifacts = adapter.buildArtifacts(input);
-  const charterHash = sha256(input.charterContent);
-  const toolsHash = sha256(input.toolsContent);
-  const teamDir = `.augmented/${input.agent.code_name}`;
-  return {
-    teamDir,
-    artifacts,
-    charterHash,
-    toolsHash
-  };
+function isJsonMode() {
+  return _jsonMode;
+}
+function jsonOutput(data) {
+  console.log(JSON.stringify(data, null, 2));
 }
 
 // src/commands/manager.ts
@@ -7684,20 +7690,18 @@ async function managerUninstallSystemUnitCommand() {
 }
 
 export {
-  getIntegration,
+  provision,
   extractCommandNotFound,
+  getIntegration,
+  CHANNEL_SECRET_ENV_KEYS,
   LITERAL_SECRET_PATTERNS,
   safeWriteJsonAtomic,
   INTEGRATIONS_SECTION_START,
   INTEGRATIONS_SECTION_END,
   estimateActiveTasksTokens,
-  CHANNEL_SECRET_ENV_KEYS,
   provisionStopHook,
   provisionIsolationHook,
   provisionOrientHook,
-  setJsonMode,
-  isJsonMode,
-  jsonOutput,
   getApiKey,
   getActiveTeam,
   setActiveTeam,
@@ -7708,14 +7712,16 @@ export {
   ApiError,
   api,
   getHostId,
+  getManagerPaths,
+  startWatchdog,
   success,
   error,
   warn,
   info,
   table,
-  provision,
-  getManagerPaths,
-  startWatchdog,
+  setJsonMode,
+  isJsonMode,
+  jsonOutput,
   managerStartCommand,
   SUPERVISOR_RESTART_EXIT_CODE,
   managerStopCommand,
@@ -7725,4 +7731,4 @@ export {
   managerInstallSystemUnitCommand,
   managerUninstallSystemUnitCommand
 };
-//# sourceMappingURL=chunk-4Y7APKV7.js.map
+//# sourceMappingURL=chunk-4B6KOQQL.js.map